Change Login Attempt Timer

[wcamps]

Hello! 

So I am completely new to FortiClient, but its management in my organization has been dropped into my lap. There have been complaints from users that the time that they have to log into the VPN is too short. I am just looking to see where exactly that timer can be changed. 

Thank you.

[SonaMuvv · Accepted solution]

Hello,

Kindly check the timers as mentioned in this article:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-timers-explanation-and-SSL-VPN-Log...

-You can use the below command to check that on Fortigate if the Forticlient is vpn only

config vpn ssl settings

sh full

end

[tpatel]

Hello Wcamp, 

Please increase remote authtimeout on fortigate global seeting  so  whatever second you are going to set in remote auth, user will get that much second to enter credential and authenticate. 

config system global

set remoteauthtimeout 60 #seconds that the FortiGate waits for response from remote authentication server.

end

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explaining-global-set-remoteauthtimeout-us...

[kiponvi1]

so you're telling me that if I was mad at you and knew your ID, i can just create a bot script to autologin with wrong pw everyday just to make your account no longer accessible? WOW AMAZING FEATURE!!!!!

[ede_pfau]

Not the account but the source IP of the failed attempt is blocked. Wouldn't make sense any other way, I agree.