Guest

Cisco TelePresence MCU 4200 Series

Continuous login failures in the event log of a Cisco acquired conferencing product or Cisco TelePresence Serial Gateway Series product

Why am I getting continuous login failures in the event log on my Cisco acquired Codian Conferencing Product or Cisco TelePresence Serial Gateway Series Product?

Messages similar to the following in your Event log indicate that someone is trying to access FTP on the unit.

17307 2007/04/04 11:52:50.673 FTP               Info      Session 0
Login failed, user "ADMINISTRATOR"
17308 2007/04/04 11:52:50.865 FTP               Info      Session 0
Login failed, user "ADMINISTRATOR"
17309 2007/04/04 11:52:51.047 FTP               Info      Session 0
Login failed, user "ADMINISTRATOR"

Attempts usually use standard usernames such as "ADMINISTRATOR". Each attempt has a different password. To prevent even the small chance of unauthorized access, disable the FTP port while you are not using it (go to Network > Services and untick the FTP check box).

This article applies to the following products:

  • Cisco TelePresence IP GW 3500 / MSE IPGW blade
  • Cisco TelePresence IP VCR 2200 / MSE VCR blade
  • Cisco TelePresence ISDN GW 3200 and 3241 / MSE 8310 and 8321 ISDN blades
  • Cisco TelePresence MCU 4200 / MSE 8420
  • Cisco TelePresence MCU 4500
  • Cisco TelePresence MSE 8510 blade
  • Cisco TelePresence Advanced Media Gateway 3600
  • Cisco TelePresence Serial GW 3340 / MSE 8330 blade

May 11th, 2012 TAA_KB_94