HELP FILE
Deploy an Authentication Attack Blocker (Host Preferences)
Use the Authentication Attack Blocker to lock out those who try to get past your host logon screen without authorization.
Host Preference Packages can only be applied to Windows hosts.
Who can use this feature? The Host Preference Packages feature is available to any Account Holder of a Central Premier or Plus subscription and to users in a Premier or Plus account with the Configuration Management permission.
Host Preference Packages allow you to define and deploy preferences and security settings to Windows hosts in your Central account.
- Create a Host Preference Package, as follows:
- In Central, go to the page.
- Click Add Package.
Result: The New Host Preference Package page is displayed. - Name your new Host Preference Package.
- Click Save.
- Under Category, select IP Address Lockout.
- Under Authentication attack blocker you have the following options:
Option Description Active Use the Authentication attack blocker to lock out those who try to get past your host logon screen without authorization. Number of Invalid attempts allowed Specify the number of invalid authentication attempts to allow before the offending IP address is locked out. Reset invalid attempt counter after After this much time has elapsed, the invalid attempt count of the offending IP address will be reset to zero. Keep attacker blocked for All attempted connections from an offending IP address will be rejected for the amount of time specified. - Continue to add settings to the Host Preference Package. When ready, click Finish and Save.
- Assign the Host Preference Package to computers or groups, as follows:
- In Central, go to the page.
- Click Edit or Click here to assign next to the Host Preference Package you want to assign.
- Choose computers and groups using the left and right arrows.
- Click Save.