Menu

Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

Sign In Register

Failed Attempt

AshishAshish Newbie ✭
in Secure Mobile Access Appliances

On SMA 7200 series we are unable to capture failed authentication attempts. It seems like the SMA is not logging or syslogging any of the failed authentication attempts. Has anyone else experienced this? Also, is there a specific log level that needs to be set to capture those events?

Category: Secure Mobile Access Appliances
Reply

Answers

  • NicholasNicholas SonicWall Employee
    edited January 2021

    You must turn on verbose logging level and each realm must have accounting records enabled. The actual message in the log will vary depending on what kind of authentication server you are using, for active directory failed auth attempts i made on a lab box they looked like this.

    image.png

    you can see my random keystroke names i tried "fhah" and "hadfhadh" If you try an existing username it returns a different message. Local auth and radius will present different failure messages as well.

Sign In or Register to comment.