Security Config Parameter

[duwijakarta]

Hi everyone, I want to implement this on an firepower. Is it supported? It blocks logins for 360 seconds if there are 5 failures within 360 seconds.

[Rob Ingram · Accepted solution]

@duwijakarta not exactly, those are IOS/NXOS commands. You could use the configure user maxfailedlogins to lock the account after failed logins and the configure unlock_time command to automatically unlock after a set period.

https://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/b_Command_Reference_for_Firepower_Threat_Defense/c_3.html#wp3584569324

[duwijakarta]

Thank you @Rob Ingram , the answer is very helpful. Then, if I want to set a password, must it contain numbers and special characters? Is that possible or not?

[Rob Ingram]

@duwijakarta there does not look to be a password policy for local users, so in theory you could use whatever characters in the password.

[duwijakarta]

@Rob Ingram ok, for previous reference is it the same as for the firepower 1140 ASA device not FTD

[Rob Ingram]

@duwijakarta the information and commands provided above are for FTD.

[duwijakarta]

@Rob Ingram Is there any and can it be used for ASA type?

[Rob Ingram]

@duwijakarta 

aaa local authentication attempts max-fail https://www.cisco.com/c/en/us/td/docs/security/asa/asa923/configuration/general/asa-923-general-config/admin-management.html#ID-2111-0000085c

You can create a password policy (characters, length, history etc) https://www.cisco.com/c/en/us/td/docs/security/asa/asa-cli-reference/I-R/asa-command-ref-I-R/pa-pn-commands.html