Anyconnect maximum failed login attempts on LDAP Windows database

[orsonjoon]

Hello,

I just can't seem to find the setting for Web and client Anyconnect to set the maximum failed login attempts when on Windows database LDAP.

I would like that after maximum 3 failed login attempts the possebility to login again times out for say 10 minutes.

At this moment it's possible to login as often as you would like, which is a big security issue.

Please, I can use some help to get this done, many thanks in advance.

Best,

Orson

[Marvin Rhoads · Accepted solution]

I don't think this can be configured in AnyConnect or on the ASA. They both rely on the settings on the Windows server. One can set this behavior there. (reference)

[Tarik Admani · Accepted solution]

Marvin,

If you were interested to see how to configure this in AD here are the steps if you are running in a windows 2008 functional domain.

http://technet.microsoft.com/en-us/library/cc770842%28v=ws.10%29.aspx

Thanks,

Tarik Admani
*Please rate helpful posts*

[Javier Portuguez · Accepted solution]

Hi there,

This indeed is not a feature the ASA controls, the AAA server is the one in charge of it.

Thanks.

[orsonjoon]

Allright, thanks guys, this was the direction to go, many thanks again....