Visitor III

Solved

Change Login Attempt Timer

4 replies
2187 views

Hello!

So I am completely new to FortiClient, but its management in my organization has been dropped into my lap. There have been complaints from users that the time that they have to log into the VPN is too short. I am just looking to see where exactly that timer can be changed.

Thank you.

FortiClient

SonaMuvvAnswer

Staff

Hello,

Kindly check the timers as mentioned in this article:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-timers-explanation-and-SSL-VPN-Login/ta-p/203615

-You can use the below command to check that on Fortigate if the Forticlient is vpn only

config vpn ssl settings

sh full

end

SonaMuvvAnswer

Staff

Hello,

Kindly check the timers as mentioned in this article:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-timers-explanation-and-SSL-VPN-Login/ta-p/203615

-You can use the below command to check that on Fortigate if the Forticlient is vpn only

config vpn ssl settings

sh full

end

tpatel

Staff

Hello Wcamp,

Please increase remote authtimeout on fortigate global seeting so whatever second you are going to set in remote auth, user will get that much second to enter credential and authenticate.

config system global

set remoteauthtimeout 60 #seconds that the FortiGate waits for response from remote authentication server.

end

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explaining-global-set-remoteauthtimeout-user/ta-p/229136

kiponvi1

New Member

so you're telling me that if I was mad at you and knew your ID, i can just create a bot script to autologin with wrong pw everyday just to make your account no longer accessible? WOW AMAZING FEATURE!!!!!

ede_pfau

SuperUser

Not the account but the source IP of the failed attempt is blocked. Wouldn't make sense any other way, I agree.

Sign up

Login with SSO

Login to the community

Login with SSO