Where to find WIPS logs

  • 1
  • Question
  • Updated 2 weeks ago
  • Answered
  • (Edited)
Hello, I have a device that is constantly getting blocked by WIPS i.e. "Temporarily block wireless clients with repeated authentication failures for x"

Which log settings do I need to configure to see logs pertaining to this WIPS block ?
Thank you kindly.
Photo of philip francis

philip francis

  • 17 Posts
  • 0 Reply Likes

Posted 2 weeks ago

  • 1
Photo of Ken Liu

Ken Liu, Employee

  • 9 Posts
  • 4 Reply Likes
Hi Philip,
Which ZD version are you using? It would be shown in "All Events/Activities" by default.
It's a "High" level event for Severity.

User[xx:xx:xx:xx:xx:xx] fails authentication too many times in a row when joining WLAN[XXX] at AP[XXX]. User[XXX] is temporarily blocked from the system for [X seconds].