cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1116
Views
0
Helpful
2
Replies

Maximum authorizations per period on MRA Expressway

aalejo
Level 5
Level 5

Hi

Does someone have used "Maximum authorizations per period" when using Expressway on  MRA ?

What it does ? I am trying to mitigate blocked accounts when trying multiples login from  jabber client but is not working..

-Alex

2 Replies 2

Manish Gogna
Cisco Employee
Cisco Employee

Hi Alex,

The Expressway can limit the number of times that any user's credentials can be used, in a given configurable period, to authorize the user for collaboration services. This feature is designed to thwart inadvertent or real denial of service attacks, which can originate from multiple client devices authorizing the same user, or from clients that reauthorize more often than necessary.

Each time a client supplies credentials to authorize the user, the Expressway checks whether this attempt would exceed the Maximum authorizations per period within the previous number of seconds specified by the Rate control period.
If the attempt would exceed the chosen maximum, then the Expressway rejects the attempt and issues the HTTP error 429 "Too Many Requests".
The authorization rate control settings are configurable in the Advanced section of the Configuration > Unified Communications > Configuration page.

Manish

- Do rate helpful posts -

Hi Manish

Thats what's the manual says.

What i need is a real life experience on how to use it since looks like  jabber on MRA does not use that parameter for pereventing multiples logons attempts.

- Alex