topic Re: How do you prevent user accounts from being locked when using Remote Access VPN? in SASE and Remote Access

How do you prevent user accounts from being locked when using Remote Access VPN?

Louis_Poulin — Wed, 07 Feb 2018 14:08:42 GMT

When you put in place remote access (VPN) and you validate the username/password against an internal directory (like Active Directory), how do you prevent a malicious user from locking user accounts from the outside?

If a malicious user tries different passwords for a username either on the SSL VPN webpage or by using the endpoint VPN client, eventually the account will be locked/disabled in the internal directory.

We can then imagine someone doing a DoS attack for all the users in the organization.

Thanks!

P.S. I'm interested in a solution for a setup running R80.10

Re: How do you prevent user accounts from being locked when using Remote Access VPN?

G_W_Albrecht — Fri, 09 Feb 2018 13:03:35 GMT

You have experienced that live, did test the issue in lab or is this just a theoretical question ?

Re: How do you prevent user accounts from being locked when using Remote Access VPN?

Louis_Poulin — Fri, 09 Feb 2018 13:13:35 GMT

All of the above.

Why do you ask?

Re: How do you prevent user accounts from being locked when using Remote Access VPN?

rajendra_bandil — Sun, 18 Feb 2018 17:32:36 GMT

Hi,

Could you please provide solution of sk92383 to study. I don't have advanced access.

Remote Access clients can connect to VPN Gateway only once

Regards

Rajendra