
Chapter 9 Authentication
268 X Family LSM User’s Guide V 2.5.1
TOS User Preferences
Security Level Determines the length and complexity requirements for passwords. The following
options are available:
• No Security Checking (Level 0)— Usernames cannot have any spaces.
Passwords are not required. When this security level is selected, users
must still enter a valid username to access the device or network services,
but no password is required.
• Basic Security Checking (Level 2)— User names must be between 6 and
32 characters long; passwords must be between 8 and 32 characters long.
• Maximum Security Checking (Level 3)— User names must be between
6 and 32 characters long.
Passwords must be strong passwords, having 8 and 32 characters and containing at
least one numeric character and one non-alphanumeric character (special
characters such as ! ? and *). This is the default setting.
Password Expiration Specifies how frequently users are required to change their passwords. You can
disable this feature or select a time period (from 10 days up to 1 year) from the drop
down list.
TIP
Best practices for password security recommend that
password expiration periods should be a minimum of 30 days
and maximum 90 days.
Password Expiration
Action
Determines what action the device takes in response to a password expiration
event. The following options are available:
• Force user to change the password when it expires.
• Notify user of expiration. If this option is selected, the device notifies the
user 5 days before the expiration occurs and at each subsequent login
prompting the user to change the password before accessing the LSM.
• Disable the account.
Max Login Attempts Determines how many failed login attempts are allowed before the system takes the
action specified in the Failed Login Action field.
Failed Login Action Determines what action the system takes when the Max Login Attempt count has
been exceeded. The following options are available:
• Lockout Account. For this option, specify a Lockout Period.
• Disable Account
• Audit Event. This option creates an entry in the Audit log documenting
the failed login attempt.
Lockout Period If the Lockout Account is selected as the Failed Login Action, this value determines
the duration of the lockout.
Table 9–10: Authentication: Preferences for X Family User, Session, and Device Security (Continued)
Field Description
Komentarze do niniejszej Instrukcji