Detecting User Break-In Attempts

Ways to detect a user attempt to break into the system are as follows:

  • Setting the LOGONATTEMPTS security option to detect repeated log-on attempts. If the number of failed attempts detected by the Web Transaction Server reaches the value set for the LOGONATTEMPTS option, the user is locked out. Users are identified by their IP addresses. The ATLASSECURITY function must have been established with the SL system command for users to be locked out for repeated failed log-on attempts.

  • Regularly reviewing the transaction logs to look for excessive 403 and 404 status code responses. This search can be made easier with a Web server log analysis program such as Analog.

Prev  Up  Next
Web Transaction Server Administration Security  Home  Localizing Security Rules