@@ -700,67 +700,6 @@ if failed logins reached a maximum threshold.
700700}
701701
702702```
703- ### brute-force-attack-preventions fields description
704-
705- bruteForceProtectionForAllLoginPages:
706- When enabled, enables Brute Force Protection for all configured login URLs.
707- When disabled, only brute force configurations for specific login pages are applied in case they exist.
708-
709- detectionCriteria:
710- Specifies configuration for detecting distributed brute force attacks.
711- action:
712- Specifies action that is applied when the defined thresholds ( failedLoginAttemptsRateReached) is reached.
713- - **alarm**: The system will log the login attempt.
714-
715- failedLoginAttemptsRateReached:
716- After configured threshold (number of failed login attempts within measurementPeriod) defined
717- action will be applied for the next login attempt.
718-
719- loginAttemptsFromTheSameIp:
720- Specifies configuration for detecting brute force attacks from IP Address.
721-
722- action:
723- Specifies action that is applied when defined threshold is reached.
724- - **alarm**: The system will log the login attempt.
725- - **alarm-and-blocking-page**: The system will log the login attempt, block the request and send the Blocking page.
726- - **alarm-and-drop**: The system will log the login attempt and reset the TCP connection.
727-
728- enabled:
729- When enabled, the system counts failed login attempts from IP Address.
730-
731- threshold:
732- After configured threshold (number of failed login attempts from IP Address) defined
733- action will be applied for the next login attempt.
734-
735- loginAttemptsFromTheSameUser:
736- Specifies configuration for detecting brute force attacks for Username.
737-
738- action:
739- Specifies action that is applied when defined threshold is reached.
740- - **alarm**: The system will log the login attempt.
741-
742- enabled:
743- When enabled, the system counts failed login attempts for each Username.
744-
745- threshold:
746- After configured threshold (number of failed login attempts for each Username) defined
747- action will be applied for the next login attempt.
748-
749- measurementPeriod:
750- Defines detection period (measured in seconds) for distributed brute force attacks.
751-
752- preventionDuration:
753- Defines prevention period (measured in seconds) for distributed brute force attacks.
754-
755- reEnableLoginAfter:
756- Defines prevention period (measured in seconds) for source-based brute force attacks.
757-
758- sourceBasedProtectionDetectionPeriod:
759- Defines detection period (measured in seconds) for source-based brute force attacks.
760-
761- url:
762- Reference to the URL used in login URL configuration (policy/login-pages).
763- This login URL is protected by Brute Force Protection feature.
764703
765704## Custom Dimensions Log Entries
766705
0 commit comments