Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
05-27-2023 11:32 AM
Hi Friends,
We have a requirement related to global protect.
Condition:
User tries to connect to global protect and fails to login.
If he tries for three or more times to connect to global protect and fails to login an email alert should come to my mail id.
I have configured email alerts in my firewall but can we specifically customize by above mentioned condition.
Could you please help me with the requirement is it possible or not ?
Regards
Satya Kalyan.
05-28-2023 10:58 AM
Device >Authentication Profile > Auth-profile-name > Advanced Tab
Set "Failed Attempts" and "Lockout Time"
After 3 failed login attempts account will be locked.
Those attempts will generate event in "Monitor > System" but not if account locks up.
When user tries 4th time then "Monitor > System" will log event that can be tracked using following filter.
( description contains 'User is in locked users list' )
So if you set up email notification under "Device > Log Setting > System" using this filter you will get alert if locked in users try to log in.
05-28-2023 11:56 AM
Hi Raido,
Thankyou for the information.
Regards
Satya Kalyan.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
