login limit for failed authentication forticlient vpn

[MICAH_TENGWA]

Hello there, gentlemen.
Please assist me with the following information.
How can we limit the number of unsuccessful authentication attempts for our VPN users to say two until after 30 minutes on FortiOS 5.4?

[Debbie_FTNT]

I'm not entirely certain if those commands existed in 5.4, but you can try:

(#config vdom)

(#edit <vdom>)

#config vpn ssl settings

#set login-attempt-limit <number>

#set login-block-time <time a user is blocked from trying again in seconds>

#end

[MICAH_TENGWA]

Hi, please am talking about IPsec

[Debbie_FTNT]

In that case, probably these settings:

#config user setting

#set auth-lockout-threshold <number of attempts>

#set auth-lockout-duration <in seconds>

#end

However, these settings will apply to ALL user authentication, not just IPSec VPN; there are no IPSec VPN specific user login settings that I could find.