4.7 Intruder Detection

The Intruder Detection feature significantly lowers the risk of the managed device being hacked. If the remote operator fails to log in to the managed device within the specified number of attempts (the default is 5), the Remote Management service is blocked and does not accept any remote session request until it is unblocked. The administrator can unblock the Remote Management service either manually or automatically.

4.7.1 Automatically Unblocking the Remote Management Service

The Remote Management service is automatically unblocked after the duration of the time specified in the Automatically start accepting connections after [] minutes option in the Remote Management policy. The default time is10 minutes. You can change the default time in the security settings of the Remote Management policy.

4.7.2 Manually Unblocking the Remote Management Service

You can manually unblock the Remote Management service from the managed device or from ZENworks Control Center.

To unblock the Remote Management service from ZENworks Control Center, the remote operator must have Unblock Remote Management Service rights over the managed device.

  1. In ZENworks Control Center, click Devices.

  2. Click Servers or Workstations to display the list of managed devices.

  3. Select the device to unlock.

  4. Click Action, then click Unblock Remote Management.

  5. Click OK.

To unblock the Remote Management service from the managed device:

  1. Double-click the ZENworks icon in the notification area of the managed device.

  2. In the left pane, navigate to the Remote Management, then click Security.

  3. Click Enable Accepting Connections if Currently blocked due to Intruder Detection.