Automatic brute-force defense — detect attackers and block their IPs at the firewall and IIS layers, before they get in.
GuardiaShield watches failed-logon and attack patterns and reacts in seconds — blocking offenders at the Windows Firewall and the IIS request layer, with safeguards so you never lock yourself out.
Offending IPs are blocked at the firewall and at the IIS/web layer — a single rule, kept tidy and reconciled.
Block known-bad reputation ranges and whole countries you don't do business with.
One block protects the whole fleet — detections on one server propagate to all the others.
Push blocks to a MikroTik router address-list so attackers are dropped at the network edge.
Whitelists for loopback, private ranges, your own IPs and recent successful logins prevent self-lockout.
Run GuardiaShield on a single machine, or as part of GuardiaMonitor across your fleet.
Failed logons and attack signatures are counted per source IP against your thresholds.
Over the threshold, the IP (and its /24 where appropriate) is blocked — never a whitelisted address.
Blocks sync across the farm and expire on a schedule you control.
Licensed per server/endpoint, on-premise. Tell us about your environment for a quote.