Intrusion Prevention
    • 18 Apr 2023
    • 1 Minute to read
    • Dark
      Light
    • PDF

    Intrusion Prevention

    • Dark
      Light
    • PDF

    Article summary

    The Intrusion Prevention section allows configuration of preventive mechanisms (i.e., Fail 2 Ban, Rescue Mode) to prevent unauthorized access to a System. The following settings are available:

    Intrusion Prevention Settings

    Setting

    Value

    Description

    Block host with multiple authentications fails.

    TRUE/FALSE

    Blocks host from access after the maximum limit of failures occur.

    Period Host will stay blocked (min).

    Number in minutes

    Amount of time the system is not reachable on the network (default: 10).

    Timeframe to monitor authentication fails (min).

    Number in minutes

    Amount of time when failed authentication attempts maxed, and before the counter gets reset (default: 10).

    Number of authentication fails to block host.

    Number

    Number of failed authentication attempts before the user is blocked (default: 5).

    Rescue Mode requires authentication.

    TRUE/FALSE

    When enabled, Rescue Mode requires authentication through a local user account (i.e., root).

    Password protected boot

    TRUE/FALSE

    When enabled, editing BIOS and Grub requires authentication based on the defined password.

    Enable Secure Boot

    TRUE/FALSE

    When enabled, only ZPE-signed OS with ZPE standard certificates in BIOS are permitted to boot.

    SED PBA Version

    Read only text

    Pre-Boot Authenticator Version installed in the SSD.

    Self-encrypting drive

    TRUE/FALSE

    When enabled, all SSD data is automatically encrypted.

    Lock password menu: Random Auto Generated

    Radio button

    Select to generate a ZPE random password.

    Generated password

    Read only text

    Auto-generated Lock password.

    WARNING! SAVE THIS PASSWORD (Lock Password is required to disable this feature.)

    User defined

    Radio button

    Enter user defined Lock password.

    Lock password

    Read only text

    Enter Lock Password.

    WARNING! SAVE THIS PASSWORD (Lock Password is required to disable this feature.)

    Confirm lock password

    Read only text

    Confirm Lock Password.

    WARNING! SAVE THIS PASSWORD (Lock Password is required to disable this feature.)

    NOTES
    Password Protected Boot is a patent-pending feature that allows Nodegrid OS to communicate with BIOS to enable the BIOS password to prevent unauthorized changes. The same password also protects Grub from unauthorized changes.
    The Password Protected Boot feature requires minimum BIOS version of 81122T00. On the WebUI, see About information for the current version.



    Was this article helpful?

    ESC

    Eddy AI, facilitating knowledge discovery through conversational intelligence