Technical Tip: How to clear disabled admin lockout

hhasny · ‎07-31-2022

Description

This article describes how to clear the disable admin lockout due to multiple login failures.

Scope

When an admin has been lockout due to multiple login failures, clear the lockout.

Solution

It is possible to clear the lockout by re-configuring the lockout-duration value to a lower value and let time pass.

FGT# config system global
FGT(global) set admin-lockout-duration 600 <----- Lockout is 600 secs and login disable.
FGT end

FGT# config system global
FGT(global) set admin-lockout-duration 5 <----- Change to lower value and let pass to clear.
FGT end

After the 5 seconds lockout duration, the disabled admin would have access again.

Re-configure the value back to the previous lockout-duration once the disabled admin is cleared.

Note.

The lockout duration is based on IP address. The same admin user may still login from a different IP source.

For admin best practice, refer the following document.