- 18 Apr 2023
- 1 Minute to read
- Print
- DarkLight
- PDF
Intrusion Prevention
- Updated on 18 Apr 2023
- 1 Minute to read
- Print
- DarkLight
- PDF
The Intrusion Prevention section allows configuration of preventive mechanisms (i.e., Fail 2 Ban, Rescue Mode) to prevent unauthorized access to a System. The following settings are available:
Intrusion Prevention Settings
Setting | Value | Description |
Block host with multiple authentications fails. | TRUE/FALSE | Blocks host from access after the maximum limit of failures occur. |
Period Host will stay blocked (min). | Number in minutes | Amount of time the system is not reachable on the network (default: 10). |
Timeframe to monitor authentication fails (min). | Number in minutes | Amount of time when failed authentication attempts maxed, and before the counter gets reset (default: 10). |
Number of authentication fails to block host. | Number | Number of failed authentication attempts before the user is blocked (default: 5). |
Rescue Mode requires authentication. | TRUE/FALSE | When enabled, Rescue Mode requires authentication through a local user account (i.e., root). |
Password protected boot | TRUE/FALSE | When enabled, editing BIOS and Grub requires authentication based on the defined password. |
Enable Secure Boot | TRUE/FALSE | When enabled, only ZPE-signed OS with ZPE standard certificates in BIOS are permitted to boot. |
SED PBA Version | Read only text | Pre-Boot Authenticator Version installed in the SSD. |
Self-encrypting drive | TRUE/FALSE | When enabled, all SSD data is automatically encrypted. |
Lock password menu: Random Auto Generated | Radio button | Select to generate a ZPE random password. |
Generated password | Read only text | Auto-generated Lock password. WARNING! SAVE THIS PASSWORD (Lock Password is required to disable this feature.) |
User defined | Radio button | Enter user defined Lock password. |
Lock password | Read only text | Enter Lock Password. WARNING! SAVE THIS PASSWORD (Lock Password is required to disable this feature.) |
Confirm lock password | Read only text | Confirm Lock Password. WARNING! SAVE THIS PASSWORD (Lock Password is required to disable this feature.) |
The Password Protected Boot feature requires minimum BIOS version of 81122T00. On the WebUI, see About information for the current version.