(v13.0.9708.31578 started 2026-07-31 15:44:51 on VM2)
Lockout Handling for OTP, TOTP, FIDO2 and RADIUS
Failed authentication attempts are monitored depending on username and source IP address and can be seen via command loutls. - An administrator can unlock a user.
System setting (only if GatewayIP2=manage): Keyword LOUT:threshold!observation!duration - threshold ... If the number of failed authentication attempts is higher than the threshold, the user will be locked out. - observation ... If after this timespan (specified in minutes) no more failed authentication attempts have been seen, the number of failed attempts will be set to 0. - duration ... Lockout duration in minutes (must be equal or greater than observation).
Any failed authentication attempt resets the observation time and the lockout time (if locked out) to its initial value. If this keyword has not been specified or threshold is 0, no lockout processing will be done.
