How to restrict SSH login?

Zyxel_Jeff
Zyxel_Jeff Posts: 1,319  Zyxel Employee
100 Answers 500 Comments Friend Collector Fourth Anniversary

Question :

There are many internet suspicious attacks on the internet including unauthorized SSH login. This article will guide how to prevent it.

alert logs.png

Answer :

You can add a a security policy to enable remote SSH access to your firewall from specific IP addresses (such as WAN IP, Geo-IP, etc.), as shown below:

Remote SSH security policy.png

Once a successful SSH login to the device occurs, you will find the corresponding log messages below:

Logs.png

If an unauthorized IP address is used for SSH access to the firewall, the traffic will be blocked by the default rule.

login failed matchdefault rule drop.png