Skip to main content
MICAH_TENGWA
MICAH_TENGWA
New Member
February 1, 2022
Question

login limit for failed authentication forticlient vpn

  • February 1, 2022
  • 1 reply
  • 2798 views

Hello there, gentlemen.
Please assist me with the following information.
How can we limit the number of unsuccessful authentication attempts for our VPN users to say two until after 30 minutes on FortiOS 5.4?

1 reply

Debbie_FTNT
Staff & Editor
Debbie_FTNT
Staff & Editor
February 1, 2022

I'm not entirely certain if those commands existed in 5.4, but you can try:

 

(#config vdom)

(#edit <vdom>)

#config vpn ssl settings

#set login-attempt-limit <number>

#set login-block-time <time a user is blocked from trying again in seconds>

#end

MICAH_TENGWA
MICAH_TENGWAAuthor
New Member
March 4, 2022

Hi, please am talking about IPsec

Debbie_FTNT
Staff & Editor
Debbie_FTNT
Staff & Editor
March 4, 2022

In that case, probably these settings:

#config user setting

#set auth-lockout-threshold <number of attempts>

#set auth-lockout-duration <in seconds>

#end

 

However, these settings will apply to ALL user authentication, not just IPSec VPN; there are no IPSec VPN specific user login settings that I could find.

Terms & ConditionsAccessibility statement