Skip to main content
Jin-Gyu
Explorer
October 24, 2025
Solved

How to fortigate admin-lockout-duration clear

  • October 24, 2025
  • 2 replies
  • 1097 views

Hi

I have two questions.

 

1. Is there a way to set admin-lockout-duration to 100000 and let another administrator unlock it when the account is locked?

 

2. Is the criteria by which the account is locked not the account name but IP based?

 

Thank you

Best answer by esalija

Dear @Jin-Gyu ,

 

Setting admin-lockout-duration to 100000 and Unlocking by Another Administrator:

You can set the admin-lockout-duration to 100000 seconds using the CLI command:

config system global
set admin-lockout-duration 100000
end

However, unlocking a locked account by another administrator is not directly supported.

The lockout duration must pass, or the device must be rebooted to clear the lockout.

Criteria for Account Lockout:

The lockout is based on the account name, not the IP address.

Each administrator account has its own lockout settings, and the lockout is triggered by failed login attempts for that specific account.

 

https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/631730/setting-the-administrator-password-retries-and-lockout-time

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/631730/setting-the-administrator-password-retries-and-lockout-time

Best regards,
Erlin

2 replies

esalija
Staff
esalijaAnswer
Staff
October 24, 2025

Dear @Jin-Gyu ,

 

Setting admin-lockout-duration to 100000 and Unlocking by Another Administrator:

You can set the admin-lockout-duration to 100000 seconds using the CLI command:

config system global
set admin-lockout-duration 100000
end

However, unlocking a locked account by another administrator is not directly supported.

The lockout duration must pass, or the device must be rebooted to clear the lockout.

Criteria for Account Lockout:

The lockout is based on the account name, not the IP address.

Each administrator account has its own lockout settings, and the lockout is triggered by failed login attempts for that specific account.

 

https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/631730/setting-the-administrator-password-retries-and-lockout-time

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/631730/setting-the-administrator-password-retries-and-lockout-time

Best regards,
Erlin

Jin-Gyu
Jin-GyuAuthor
Explorer
October 25, 2025

Thank you for your answer!

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!