We have Cerberus configured to auto block IP address on a set number of failed login attempts. In the Cerberus 126.96.36.199 console under IP manager we have enabled auto-blocking and enabled DoS Protection. Under “Pre-Blocked Settings”, We have configured “block failed login Attempts before Auto-Block” to a value of 100 (not the real setting ). When we look below under the “IP Addresses “being watched” section” we see several (10+) IP addresses that have the same number of failed login attempts as the value specified under “pre-block”. The IP address is not added to the block list under the general section and continues to be listed in the IP Addresses being watched.
End result is the that the IP address is connecting to the system more times and is not being blocked. Please advise