12-22-2011 12:31 AM
I have set fabric watch to send events.
for some reason, I keep receving the following event -
.126.96.36.199.188.8.131.52.184.108.40.206.0.5.30.128.220.127.116.11.0.0.0.0.0.0.1993:SEC-1193 Security violation: Login failure attempt via TELNET/SSH/RSH. IP Addr: 10.45.129.11
I have unmarked all security-related events to disable this message for being received. before I ask my NOC people to filter messages manually, do you know how can I disable these messages?
I also look for a document that contains all events (OID, text message etc) are any of you familiar with that?
01-06-2012 01:43 AM
You might have hit DEFECT000269725, see release note 6.4.0, v3, page 88
It also fixes multiple messages posted in the errdump, of the sec-1193. Previous version of the FOS might have different behavior due to verifying the fix.