Skip to main content
wcamps
wcamps
Visitor III
August 30, 2024
Solved

Change Login Attempt Timer

  • August 30, 2024
  • 4 replies
  • 2160 views

Hello! 

 

So I am completely new to FortiClient, but its management in my organization has been dropped into my lap. There have been complaints from users that the time that they have to log into the VPN is too short. I am just looking to see where exactly that timer can be changed. 

 

Thank you.

Best answer by SonaMuvv

Hello,

Kindly check the timers as mentioned in this article:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-timers-explanation-and-SSL-VPN-Login/ta-p/203615

-You can use the below command to check that on Fortigate if the Forticlient is vpn only

config vpn ssl settings

sh full

end

 

4 replies

SonaMuvv
Staff
SonaMuvvAnswer
Staff
August 30, 2024

Hello,

Kindly check the timers as mentioned in this article:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-timers-explanation-and-SSL-VPN-Login/ta-p/203615

-You can use the below command to check that on Fortigate if the Forticlient is vpn only

config vpn ssl settings

sh full

end

 

    tpatel
    Staff
    tpatel
    Staff
    August 30, 2024

    Hello Wcamp, 

     

    Please increase remote authtimeout on fortigate global seeting  so  whatever second you are going to set in remote auth, user will get that much second to enter credential and authenticate. 

    config system global

    set remoteauthtimeout 60 #seconds that the FortiGate waits for response from remote authentication server.

    end

    https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explaining-global-set-remoteauthtimeout-user/ta-p/229136

      kiponvi1
      kiponvi1
      New Member
      August 31, 2024

      so you're telling me that if I was mad at you and knew your ID, i can just create a bot script to autologin with wrong pw everyday just to make your account no longer accessible? WOW AMAZING FEATURE!!!!!

      ede_pfau
      SuperUser
      ede_pfau
      SuperUser
      September 1, 2024

      Not the account but the source IP of the failed attempt is blocked. Wouldn't make sense any other way, I agree.

      Terms & ConditionsAccessibility statement