Ipswitch WhatsUp Gold User Guide - Ipswitch Documentation Server

Ipswitch WhatsUp Gold User Guide
g) Enter the computer name or IP address of the computer in which you want to
connect.
h) Select a credential from a list of Windows credentials (pulled from the Credentials
Library), then click OK to connect to the computer.
i) Select Server from the Performance object list.
j) Under Performance Counters, select the ErrorsLogon.
k) Click OK to add the Performance counter to the New WMI Monitor dialog.
l) Select Rate of Change from the the Check type list.
m) In the Rate of Change box, enter the number of logon errors you feel is acceptable.
This is the number of failed logon attempts between polls.
n) In the If the value is above the rate, then the monitor is box, select Down.
o) Click OK to add the active monitor to the library.
2 Enter the credentials for logging on to the device to which you will add this monitor.
a) In the Device Properties dialog for the device, select Credentials.
b) Select Windows, then click Edit.
c) Click the browse (…) button next to Windows credentials to access the Credentials
Library.
d) Create a Windows credential using the administration login and password for the
device you want to create the monitor for. When you have configured the credential,
click Close.
e) On the Credentials page, select the new Windows credential, then click OK.
3 Add the ErrorsLogon monitor to the device.
a) In your device list, find the device. Double-click the device to display its properties,
then select Active Monitors.
b) Click Add. The Active Monitor wizard appears.
c) Select the ErrorsLogon monitor, and continue working through the wizard to
configure any actions for the monitor.
For more information on setting up an action, see Configuring an Action (on page 273).
Consider creating several levels of the active monitor, each with a higher threshold than the
other, and with more severe actions associated with it.
For example, create a monitor with 30 as the threshold that simply sends you an email, letting
you know that at least 31 attempts have been made. Next, create another monitor that uses
60 as the threshold. This monitor may have an SMS action associated with it that sends a text
message to you when at least 61 attempts are made. For the most severe level you could
create a 100 threshold and have the action send messages to several people who could block
the IP or take the device off the network while the attack is addressed.
224