Behavior Models Cookbook - Authentication Models - Authentication -
Authentication Models      Data Collection Models

Authentication

Path: /model/authentication/authentication.mod

This behavior model tracks authentication failures on the network. If more than three failures occur within ten minutes, then NerveCenter sends a 1101 Inform to the network management platform.

Property

The following property must be in the property group for the nodes you want to monitor:

NO_PROP

Trigger Generators

Below is a list of the objects that generate triggers:

Events Sent to OpenView

Events Sent to OpenView by Authentication summarizes the events this behavior model sends to OpenView:

Events Sent to OpenView by Authentication

Event Name Inform Number Description

NC_Authentication

1101

This inform event is triggered by the Authentication alarm and indicates that three consecutive log in attempts failed for the node. This event could indicate that unauthorized access to the network has been attempted.

For more information about integrating NerveCenter with OpenView or the other NerveCenter-supported network manager platforms, refer to the book Integrating NerveCenter with a Network Management Platform.

Optional Customization

Below is a list of behavior model settings that you might want to customize to suit the requirements of your site.

Authentication Models Data Collection Models
29 July 2003