Skip to content

Commit 9ce79a7

Browse files
authored
Update how-to-connect-health-adfs-risky-ip.md
1 parent 385bab3 commit 9ce79a7

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/active-directory/hybrid/how-to-connect-health-adfs-risky-ip.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ ms.collection: M365-identity-device-management
2121

2222
Active Directory Federation Services (AD FS) customers may expose password authentication endpoints to the internet to provide authentication services for end users to access SaaS applications such as Microsoft 365.
2323

24-
It's possible for a bad actor to attempt logins against your AD FS system to guess an end user’s password and get access to application resources. As of AD FS in Windows Server 2012 R2, AD FS provides the extranet account lockout functionality to prevent these types of attacks. If you're on an earlier version, we strongly recommend that you upgrade your AD FS system to Windows Server 2016.
24+
It's possible for a bad actor to attempt logins against your AD FS system to guess an end user’s password and get access to application resources. As of Windows Server 2012 R2, AD FS provides the extranet account lockout functionality to prevent these types of attacks. If you're on an earlier version, we strongly recommend that you upgrade your AD FS system to Windows Server 2016.
2525

2626
Additionally, it's possible for a single IP address to attempt multiple logins against multiple users. In these cases, the number of attempts per user might be under the threshold for account lockout protection in AD FS.
2727

@@ -93,7 +93,7 @@ Like generic alert notification settings in Connect Health, it allows you to cus
9393

9494
You can update the alerting threshold in **Threshold Settings**. The system threshold is set with default values, which are shown in the following screenshot and described in the table.
9595

96-
The risk IP report threshold settings are separated into four categories, as shown:
96+
The risk IP report threshold settings are separated into four categories.
9797

9898
![Screenshot of the Azure AD Connect Health Portal that shows the four categories of threshold settings and their default values.](./media/how-to-connect-health-adfs/report4d.png)
9999

0 commit comments

Comments
 (0)