Interpreting Monitor alerts

I have my monitor setup with several thresholds.

And I am getting
gwiapop3BadPassword
gwiapop3UnknownUsers

notifications.

I would like to followup and see further details about these MIB captures but I can't find anything relating to them in the log files.

Where do I go what do I filter on.

Thanks

Tags:

Parents Reply
  • Hi,

    From what I understand...

    gwiapop3BadPassword - count of incorrect passwords entered for a pop3 account being accessed via your GWIA

    gwiapop3UnknownUsers - count of unknown usernames being used to login to a pop3 account being accessed via your GWIA

    Now, there are two possibilites... either you have users who don't know their username/password, or something more sinister like an external person trying to guess usernames and passwords against your system! Using your GWIA verbose logs you should be able to figure out which one it is.

    Let us know how it goes.

    Cheers,
Children
No Data