We would like to see event based lockout policies with the ability to configure different lockout attempt thresholds and durations and not effect other events for the same account.
For example, 3 failed login attempts against a VPN event would lock the AA account for 3 minutes, while allowing the same account to be capable of using all other events. Another event might lockout the account after 5 failed login attempts and lockout the account for that event only and have a duration of 30 minutes...
by: Dennis R. | over a year ago | Configuration
Comments
I do not believe that we currently track login by events in a fashion that would facilitate this capability.
I Like this functionality. We will investigate.
I have validated that we do not have a way to provide this today. We will need to add monitoring of each event as an individual entity so that they can be treated differently based on policies.
This is not a small enhancement and we will need to plan it for a future version.