Prevent brute force attack on Web mail

[medtemo]

I have one question. We are running R77.30. How to prevent brute force attack on Web mail. Attack is coming from blacklisted IP (Tor, free proxy). IPS blade is activated but nothing is blocking. What is best practice or documentation to prevent this kind of attack?

[PhoneBoy]

Unless you're using HTTPS Inspection for inbound traffic to your web server, the relevant IPS signatures probably won't do any good.
If you want to block traffic from known tor exit nodes, see: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...