Sagan high stable other

[CISCO-MERAKI] WPA failed authentication attempt

[CISCO-MERAKI] WPA failed authentication attempt

View Source

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[CISCO-MERAKI] WPA failed authentication attempt"; content: "type=device_packet_flood"; content: "packet='deauth'"; classtype: attempted-user; reference: url,meraki.cisco.com/lib/pdf/meraki_whitepaper_air_marshal.pdf; sid:5003049; rev:2;)

Field Validations

Loading…

Comments (0)

Loading comments...