Results 1 to 3 of 3
  1. #1
    Newbie
    Join Date
    Oct 2019
    Posts
    2

    Default Suspicious Activity event from blocked country

    I have my firewall set to block and flag certain client countries, including KR.

    I am getting "Suspicious Activity" events from KR clients. The Suspicious Activity is "Client created many SSH sessions"

    My question is: Why are SSH sessions even be allowed to be created?

    I am running Untangle 14.2.2

  2. #2
    Newbie
    Join Date
    Oct 2019
    Posts
    2

    Default

    Found the answer in support article 'support.untangle.com/hc/en-us/articles/360004057653-What-do-Suspicious-Activity-Alerts-mean-'

    "NOTE: These alerts will be triggered even if the Untangle blocked each session. "

  3. #3
    Master Untangler
    Join Date
    Oct 2017
    Posts
    162

    Default

    I started getting these alerts all day yesterday as well. Still getting them today too.

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2