How to Limit User Authentication Attempts on FortiMail

Forum|Forum|8 months ago
December 8, 2025
4 replies
520 views

Hello,

I’m looking to confirm if there’s a way (and I believe there probably is) to limit the number of authentication attempts for regular FortiMail (in server mode) users (local users), not administrators.

Essentially, I want to apply something like a temporary lockout: for example if a user fails authentication 5 times, their login should be blocked for about a minute (or any configurable time) before they can try again.

Does FortiMail support this for end-users? If yes, where can I configure it?

Kind regards,

FortiMail

AEK

SuperUser

Hi Cel

Didn't try it before but this tech tip should help.

https://community.fortinet.com/t5/FortiMail/Technical-Tip-The-Too-many-failed-login-attempts-error/ta-p/298850

AEK

ByteHavenAuthor

Explorer III

Hello AEK,

Thanks for your response. I have seen that article before, but it appears to only apply to administrator accounts and not to end users.

Kind regards,

filiaks1

Explorer III

If you have FortiAnalyzer or another SIEM/SOAR solution maybe you can automate it from there by making a playbook?

ByteHavenAuthor

Explorer III

Hey,

That's one solution. Unfortunately I don't have a FAZ or SIEM. I've opened a ticket with the support and according to them you can't limit the attempts, oh well !

Thanks for your input.

Sign up

Login with SSO

Login to the community

Login with SSO