Table of Contents
< All Topics
Print

[Cyber Command] The contents of weak password log files downloaded from the same time period are different after a period of time

Problem Description

Customers reported that the Weak Password Asset logs downloaded from Asset Center-Vulnerability Awareness two days ago were different from the logs downloaded now, and the log volume was reduced. And now Weak Password interface cannot query the Weak Password logs of the corresponding time interval.

Warning Very-Low Risk

Effective troubleshooting steps

In log retrieval, you can view the Weak Password incident at the corresponding time point

Root cause

We confirmed with R&D that the vulnerability display is an aggregation mechanism. When the same source IP triggers the same Weak Password incident, the time update will refresh the old record. Therefore, Weak Password interface displays the weak password records that triggered the same incident.

solution

Vulnerability perception is an aggregation mechanism. The Weak Password interface displays the Weak Password records that triggered the same incident. If you need to query previous Weak Password incident, you can search for the corresponding Weak Password incident in the log retrieval.

Original Link

https://support.sangfor.com.cn/cases/list?product_id=24&type=1&category_id=10040&isOpen=true