AudioCodes MP-11x User Manual page 71

User's Manual
Parameter
Web: Status
Web: Password Age
Web: Session Limit
Web: Session Timeout
Web: Block Duration
Version 6.6
Defines the status of the Web user.

New = (Default) User is required to change its password on the next
login. When the user logs in to the Web interface, the user is
immediately prompted to change the current password.

Valid = User can log in to the Web interface as normal.

Failed Access = This state is automatically set for users that exceed
a user-defined number of failed login attempts, set by the 'Deny
Access on Fail Count' parameter (see 'Configuring Web Security
Settings' on page 73). These users can log in only after a user-
defined timeout configured by the 'Block Duration' parameter (see
below) or if their status is changed (to New or Valid) by a System
Administrator or Master.

Old Account = This state is automatically set for users that have not
accessed the Web interface for a user-defined number of days, set
by the 'User Inactivity Timer' (see 'Configuring Web Security
Settings' on page 73). These users can only log in to the Web
interface if their status is changed (to New or Valid) by a System
Administrator or Master.
Notes:

The Old Account status is applicable only to Admin and Monitor
users; System Administrator and Master users can be inactive
indefinitely.

For security, it is recommended to set the status of a newly added
user to New in order to enforce password change.
Defines the duration (in days) of the validity of the password. When this
duration elapses, the user is prompted to change the password;
otherwise, access to the Web interface is blocked.
The valid value is 0 to 10000, where 0 means that the password is
always valid. The default is 90.
Defines the maximum number of Web interface sessions allowed for
the user. In other words, this allows the same user account to log in to
the device from different sources (i.e., IP addresses).
The valid value is 0 to 5. The default is 2.
Note: Up to 5 users can be concurrently logged in to the Web interface.
Defines the duration (in minutes) of Web inactivity of a logged-in user,
after which the user is automatically logged off the Web interface.
The valid value is 0 to 100000. The default is according to the settings
of the 'Session Timeout' global parameter (see 'Configuring Web
Security Settings' on page 73).
Defines the duration (in seconds) for which the user is blocked when
the user exceeds a user-defined number of failed login attempts. This is
configured by the 'Deny Access On Fail Count' parameter (see
'Configuring Web Security Settings' on page 73).
The valid value is 0 to 100000, where 0 means that the user can do as
many login failures without getting blocked. The default is according to
the settings of the 'Deny Authentication Timer' parameter (see
'Configuring Web Security Settings' on page 73).
Note: The 'Deny Authentication Timer' parameter relates to failed Web
logins from specific IP addresses.
71
4. Web-Based Management
Description
MP-11x & MP-124