4.2.6 Protecting users against password guessing attacks Protecting against password guessing attacks
Kerio Control can block IP addresses suspicious of password guessing attacks.
If an attacker tries to log in unsuccessfully 10 times (through various services), Kerio Control blocks the IP address.
1.
Go to section
Domains and User Login > tab Security Options .
2.
Select the
Block IP addresses suspicious of password guessing attacks option.
3.
You can select a group of trustworthy IP addresses.
For more information, refer to
Configuring IP address groups
(page 339).
4.
Click
Apply .
www.gfi.com 4 Settings | 232 When Kerio Control blocks an account, user cannot log in. Kerio Control unlocks the blocked IP addresses after 5 minutes.