VPN SSL Autoban IP

Forum|Forum|2 years ago
August 8, 2024
2 replies
1391 views

Hello Team,

This is the scenario:

FGT firewall offering SSL VPN service
Is there any way to do these things?
1. Autoban IP same user wrong password 5 attempts over 10 minutes

2. Autoban IP different user wrong password 10 attempt over 30 minutes

Thanks for the support
BR

ozkanaltas

Valued Contributor III

Hello @luca1994 ,

Actually Fortigate does this automatically. But it just looks IP address of who tried. If a person has tried to login with the same IP address after 2 tries FortiGate will ban the IP address of the client for 60 seconds.

If you want, you can change this setting with these cli commands.

config vpn ssl settings set login-attempt-limit 2 set login-block-time 60 end

If you want to take more specific action for a ban, you can use automation for that. It can follow the logs with automation and it can take action for you.