admin login blocking time

concerning a) it only blocks the access from the IP that had to many unsuccessfull attempts. Login from other IP addresses is still possible. concerning b) I don' t know if it is possible to modify the value for the blocking-time, but I would suggest you use trusted hosts for your administrator accounts. Trusted hosts will make sure that login is only possible from the IPs you have specified as trusted hosts.(You can specify up to three hosts or networks) All attempts to log in from other IP addreses will be blocked.

for b) I cannot use trusted hosts as I will access the FGT from a DSL line, meaning every 24h a different IP is allocated by our provider. Ede

To adjust the admin lock try the following in global settings set admin-lockout-duration set admin-lockout-threshold

@emnoc, that is exactly what I needed. Thanks a lot. posts like yours should be made permanent for others to search. Ede

I have a Fortigate setup on a LAN segment that I have 2 honeypots locate on and it' s funny to see who, and what the internet trys to uses aganist your firewall. With email alert logging and syslog, I can get great information on when ssh session attempts are being executed.