Technical Tip: How to change lockout period

[guptas]

Description	This article describes how to change the lockout period.
Scope	FortiWeb.
Solution	By default, if an admin/non-admin account tries 3 attempts to log in with the wrong username/password, FortiWeb GUI/CLI locks out for 60 seconds. It is possible to change the lockout period value and the number of valid attempts. Log in to CLI and execute the command below: config system global     set admin-lockout-threshold 5 <----- Number of attempts.     set admin-lockout-duration 80 <----- Duration for lockout. end Note: Unlocking a locked administrator account directly by another administrator is not supported. Instead, the lockout will typically clear after the lockout duration passes or the device is rebooted. The lockout is specific to each account name, not the IP address, and each administrator account has its own lockout settings. The lockout is triggered by failed login attempts for that particular account, so managing lockout policies and waiting for the lockout duration are the primary ways to regain access. Related documents: admin-lockout-threshold - FortiWeb CLI reference admin-lockout-duration - FortiWeb CLI reference