Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Wojciech Raczkowski (WojciechR)
Quad Graphics

Quad Graphics
PL
WojciechR Member since 2016 11 posts
Quad Graphics
Posted: Sep 14, 2020
Last activity: Sep 15, 2020
Posted: 14 Sep 2020 8:40 EDT
Last activity: 15 Sep 2020 2:45 EDT
Closed

How to address SECU0006 alert

Hi

I see many SECU0006 (Attempt to attack a user session has been blocked) alerts in PegaRULES-ALERTSECURITY.log.

Does anyone know how to address them?

https://community.pega.com/knowledgebase/articles/secu0006-alert-attempt-attack-user-session-has-been-blocked

Most of them happen when LastStep column in logs is Rule-Obj-Activity:ReloadSection (see attachment) but there are more scenarios like Rule-Obj-Activity:DoClose (pzUnsubscribeFromPush) and more.

 

Thanks for any help  

***Edited by Moderator Marissa to update Content Type from Discussion to Question***
To see attachments, please log in.
Pega Platform
System Administration
Cross-Industry
Senior System Architect

Posted: 4 years ago
Posted: 15 Sep 2020 2:45 EDT
Marc Lasserre (MarcLasserre_GCS)
PEGA
Technical Account Manager
Pegasystems Inc.
FR

I was wondering if you already been through the following articles: https://community.pega.com/knowledgebase/articles/security/security-checklist

But if this is Production I guess you have done it already. If think you will need to check the Logs to check what could be happening at the same time reported on your ALERTSECURITY log.

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice