Increased VPN attacks

[michio42]

Anyone else noticing a massive increase in credential spray attacks on your VPN connections as of the last week or two? We've always had the occasional scans and automated attempts, but lately our SSL-VPN ports are getting hit non-stop with bad login attempts from all over the world. Setting the SSL-VPN host settings to only accept connections from a few required countries cut down on the noise a ton, but still seeing lots of attempts. Checked the logs on my gate at home and am seeing the same thing there.

[Anthony_E]

Hello michio42,

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Regards,

[Anthony_E]

Hello michio42,

I could read that indeed, there is an increase in credential spray attacks on VPN connections.

The piece of advice I could get, is to Geo block.

Regards,