Manage Denied Login Locations

If the Denied Login Locations rule is configured, alerts are generated only for sign-in attempts from listed countries.

Note: If this rule is configured, the option to configure Approved Login Locations is disabled.
These resources are required:
  • Permissions d'administrateur pour Arctic WolfUnified Portal.

    Vous devez être un contact principal ou secondaire. Si vous avez besoin de ce niveau d'accès, envoyez votre demande à un contact principal ou secondaire de votre organisation, ou cliquez sur Request an Update. Pour plus d'informations, consultez Demander une mise à jour de règle de configuration d'alerte.

  1. Connectez-vous à Arctic Wolf Unified Portal.
  2. Dans le menu de navigation, cliquez sur Profil de l'organisation > Règles de configuration des alertes.
  3. Click Manage Configurations.
  4. For the Restricted Country User Allowlist rule, under Actions, click Create Configuration or View.
    The option that appears depends on whether this rule is already configured.
    Note: Time-related fields and suppressions default to Coordinated Universal Time (UTC) and not your local timezone.
  5. Do one of these actions:
    • To edit an existing entry — In the corresponding table row, under Actions, click Edit.
    • To add a new entry — Click Add Entries .
  6. Edit the list of approved countries:
    • To add a country — In the Add Countries field, start typing the name of a country, and then select a country from the list.
    • To remove a country — Click for a country listed under the Add Countries field.
  7. Optional: To configure start and end dates for this entry, in each date field, click Calendar and select a date.
    Tip: The rule will expire on the end date. For example, if the selected end date is March 16, the rule will be effective on March 15 and will stop being effective on March 16.
  8. Click Apply.