Extend Admin lockout time

[TomS]

Currently when entering an incorrect password too many times for the local admin I get the message "Logins currently blocked. Please wait a few seconds." However there either is no block at all, or the time out is no more than two seconds, as I can continue to paste in invalid passwords and get denied, or enter a valid password and get allowed in. I am using Web Gateway v10.2.5.

Is there a way to extend the admin lockout time?

Thanks 🙂

[fw_mon · Accepted solution]

Hello @TomS 

I can confirm, I have a feeling that the UI just shows a popup window and you can repeat a login attempt right after closing the popup without any delay. It looks like a way to slow down brute force attempts by showing a poput that must be closed by click and no really delay is introduced between attempts.

As there are no delay thefore it seems there is no way to configure it. 

What you can is to monitor the audit.log for bruteforce attempts and react accordingly.

Timestamp  : 15/Nov/2022:20:03:24.674 -0600
User       : admin
Action     : USER_LOGIN_FAILED
Source Type: USER
Source ID  : 10.20.30.40
Appliance  : mwg
Details:
   User-Agent: Java/1.8.0_342
   Details : Logins blocked due to prior failed login.