monitor security-violations

Last Updated : Jan 20, 2021 |
Use monitor security-violations to view information about failed attempts to access the system.
Prolog information
Metadata
Keywords:

Syntax

monitor security-violations [authorization-code | remote-access | station-security-codes] 
authorization-code
Monitors the number of failed attempts of accessing the system resources due to an invalid authorization code.
remote-access
Monitors the number of failed attempts of dialing into the system using remote access due to an invalid barrier code or authorization code.
station-security-codes
Monitors the number of failed attempts of accessing the system resources due to an invalid station security code.

Description

Use monitor security-violations to see the following information about failed attempts to access the system:
  • the time of the violation
  • trunk-group number
  • member number
  • extension
A total of 16 entries are maintained for each type of access. The monitor security-violations report is automatically updated every 30 seconds until the command is canceled by pressing CANCEL. Canceling does not log off the terminal.

monitor security-violations field descriptions

Field
Description
Authorization code violations
Date
The date of the security violation in the MM/DD format.
Time
The time of the logged security violation in the HH:MM format.
Origin
The source of the call: internal or external.
Auth-Cd
The dialed authorization code.
TG No.
The trunk group involved in the security violation.
Mbr
The trunk-group member number involved in the security violation.
Bar-Cd
The dialed barrier code, if required.
Ext
The extension used to access the system.
CLI/ANI
The calling party number.
Remote access barrier code violations
Date
The date of the security violation in the MM/DD format.
Time
The time of the logged security violation in the HH:MM format.
TG No.
The trunk group that carried the incoming remote access attempt.
Mbr
The trunk-group member number associated with the trunk from which the remote access attempt terminated.
Ext
The extension used to access the system.
Bar-Cd
The dialed barrier code, if required.
CLI/ANI
The calling party number.
Station security code violations
Date
The date of the security violation in the MM/DD format.
Time
The time of the logged security violation in the HH:MM format.
TG No.
The trunk group involved in the security violation.
Mbr
The trunk-group member number involved in the security violation.
Port/Ext
The port or extension used to access the system.
FAC
The dialed feature access code.
Dialed digits
The dialed digits.