Incorrect password adjustment using VPN 3000 through ACS

[dpatkins]

We have a VPN 3000 which requires authentication through our ACS server using our Windows Domain.

Our local policy on the Windows domain calls for the account to lock out after 5 bad attempts. However, when you type in incorrect accounts using the VPN through ACS, it gives you only 3 attempts. Is there away that I can change that to 5 attempts?

Thanks

Dwane

[jhillend]

In ACS you can set the number of successive failed attempts required to disable the account in the User Configuration under Account Disable. There are settings in the VPN 3000 as well, which actually control the number of attemps. I'm not sure what those are.