Products: HP - Aruba ClearPass
| Rule ID | Rule Name |
|---|---|
| THRESHOLD-S00096 | Brute Force Attempt |
| FIRST-S00029 | First Seen Successful Authentication From Unexpected Country |
| THRESHOLD-S00097 | Impossible Travel - Successful |
| THRESHOLD-S00095 | Password Attack |
| OUTLIER-S00001 | Spike in Login Failures from a User |
| CHAIN-S00008 | Successful Brute Force |
| Log Mapper ID | Log Mapper Name |
|---|---|
| 14d66ca4-56d5-4c4b-8951-96c0239a468e | Aruba ClearPass Guest Access |
| ae3b082a-fdab-412e-8186-82cdf74b8290 | Aruba ClearPass Syslog |
| 658da221-4ac8-4b0c-ac27-66540a28e0e2 | Aruba ClearPass User Authentication Failed |
| d0dc0bc9-3674-4454-a625-63d12aa82f73 | Aruba ClearPass User Authentication Successful |
| 50118e0a-48ad-4600-9ffd-973a71fdcfaf | Aruba ClearPass WiFi Access Tracker |
| 38cb7b23-511a-4399-bd4f-5f6ec63cd55b | Aruba ClearPass Wifi Failed Tracker |