Bob is the network administrator for SecureX Communications. He is trying to configure his firewall to block password brute force attempts on his network. He enables blocking the intruder's IP address for a period of 24 hours' time after more than three unsuccessful attempts. However, he still receives many brute-force attempts generated from various IP address around the world. What Bob can do to eliminate the hackers from brute forcing login attempts on his network?

Bob is the network administrator for SecureX Communications. He is trying to configure his firewall to block password brute force attempts on his network. He enables blocking the intruder's IP address for a period of 24 hours' time after more than three unsuccessful attempts. However, he still receives many brute-force attempts generated from various IP address around the world.

What Bob can do to eliminate the hackers from brute forcing login attempts on his network?

Enable IDS to monitor the intrusion attempts and automatically block the intruders' IP addresses

Enforce a password policy and use account lockouts after three wrong login attempts no matter if it is a legit users

You cannot completely block the intruders attempt if the intruders constantly switch proxies

Enforce complex password policy on the network so that password are more difficult to brute force

Explanation

Firewall could only allow/deny IP address, it requires multiple solutions to overcome Bob's case. The other nearest answer is Enforce complex password policy and enable only White-list Firewall but the main message of this question is to highlight that Firewall is not the ultimate solution for blocking intruders