| Description | This article describes how to find the failed login attempts to firewall login and SSL VPN login. |
| Scope | FortiGate. |
| Solution |
Reviewing failed login attempts is critical in safeguarding the device's security posture. This helps the organization identify brute-force attacks to avoid account lockouts. Repeated login failures may signal an attacker scanning the system for vulnerabilities which is an early Indicator of Threats
Login failures can also be seen in system event logs and VPN event logs but the below option gives us a consolidated view of failed login attempts on both firewall login and SSL VPN login focused on login failures. Navigate to Dashboard -> Top Failed Authentication to view the below
Admin Login details:
VPN login details:
Related articles: Troubleshooting Tip: Reason for failed Admin login on FortiGate or an unsuccessful login on FortiGat...Technical Tip: How to check failed admin logins from the GUI and CLI |
