Setting Account And Port Lockouts; Account Lockout - Polycom HDX 4000 Series Administrator's Manual

Setting Account and Port Lockouts

Polycom, Inc.
Artisan Technology Group - Quality Instrumentation ... Guaranteed | (888) 88-SOURCE | www.artisantg.com
Setting Description
Minimum Changed Specifies the number of characters that must be different
Characters or change position in a new password. If this is set to 3,
123abc
Maximum Specifies the maximum number of consecutive repeated
Consecutive characters in a valid password. If this is set to 3,
Repeated is a valid password but
Characters
Can Contain ID or Its Specifies whether the associated ID or the reverse of the
Reverse Form ID can be part of a valid password. If this setting is
enabled and the ID is
nimda
Note: This setting is unavailable for Meeting passwords.
Changes to most password policy settings do not take effect until the next time
the password is changed. Changes take effect immediately for Minimum
Password Age in Days, Maximum Password Age in Days, and Password
Expiration Warning. Changing Minimum Length from Off to some other
value also takes effect immediately.
HDX systems provide access controls that prevent unauthorized use of the
system. One way someone might try to discover valid user names and
passwords is by exhaustively attempting to log in, varying the user name and
password data in a programmatic way until discovering a combination that
succeeds. Such a method is called a "brute-force" attack.
To mitigate the risk of such an attack, two access control mechanisms are
available on HDX systems. The first type of access control, Account Lockout,
is used in conjunction with external authentication, while the second, Port
Lockout, is used when external authentication is not active. Refer to
Authentication on page 8-5

Account Lockout

Account Lockout temporarily locks an account from accepting logins after a
configurable number of unsuccessful attempts to log in to that account. It is
available only when external authentication is enabled, but protects only the
local HDX system's Admin and User local accounts. The Active Directory
Server protects Active Directory accounts.
can change to 345cde but not to
aaaa123
, passwords
admin
are allowed.
for more information.
Security
123bcd .
aaa123
is not.
and
admin
External
8–15