How can I be alerted of a certain Event.

[tomcsanadi]

My FTP server is constantly under attack, It is running on a Windows 2003 Small Business server, We use complex usernames, and the accounts lock after 5 bad attempts, so I feel safe in that aspect, but how can I be alerted when the first MSFTPSVC event is logged so I can add a rule to our ASA.

P.S. I am in the process of getting rid of FTP completely.

Tom

 

[josephdavis]

WMI will do the trick. Check out the link below.

http://www.microsoft.com/technet/scriptcenter/guide/sas_wmi_kzcp.mspx

-Joe

http://joe.galactik.com