NAS server keeps blocking some user IP addresses.

EPSrookie 81 Reputation points
2022-07-23T00:02:13.073+00:00

Our client has a NAS server which is being accessed by users but the NAS keeps blocking some IPs with error repeatative bad password.
Then they have to unblock it from the NAS and then they get access.
While I have checked the user's password is not changed for a while.
After unblocking the IP we tried to access the drive and it was accessible without changing password.
I have changed the user password and tried to access the drive yet it was accessible, the IPs which are getting blocked are reandom.
Could it be issue with the AD or from the NAS server?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,206 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,932 questions
Windows 10 Network
Windows 10 Network
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Network: A group of devices that communicate either wirelessly or via a physical connection.
2,276 questions
Windows Server Infrastructure
Windows Server Infrastructure
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Infrastructure: A Microsoft solution area focused on providing organizations with a cloud solution that supports their real-world needs and meets evolving regulatory requirements.
516 questions
Windows Server Storage
Windows Server Storage
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Storage: The hardware and software system used to retain data for subsequent retrieval.
632 questions
0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. rr-4098 1,236 Reputation points
    2022-07-23T16:12:31.773+00:00

    What is the make and model NAS that is being used? Also are the clients on different vlan's?

  2. rr-4098 1,236 Reputation points
    2022-07-24T08:30:43.577+00:00

    I assume there no issues for user accessing the NAS while in the office and not through VPN correct? When a lockout happens, are you seeing anything odd in your firewall?

  3. Mohammed Altamash Khan 2,081 Reputation points
    2022-07-24T10:22:30.77+00:00

    Hi @EPSrookie

    Let me tell you about similar situation we had with fujitsu and ibm NAS. May be this will help you too.

    1) Kindly check if there is any password policy running with NAS or NAS hold some policy like that. Some NAS box hold AUTOBLOCK policy where using bad password block the IP of clients
    2) Kindly check with SOC team ( if you have ) or IT security Team if they are receiving any alert from your NAS IP address.

    ---------IF YOU FIND THIS HELPFUL, PLEASE ACCEPT THE ANSWER-----------

  4. rr-4098 1,236 Reputation points
    2022-07-25T14:05:05.45+00:00

    You may also want to reach out to you NAS vendor to see if they have heard of this before as well.