AudioCodes Mediant 600 User Manual page 70

Parameter
Web: Status
Web: Password Age
Web: Session Limit
Web: Session Timeout
Web: Block Duration
User's Manual
Defines the status of the Web user.

New = (Default) User is required to change its password on the
next login. When the user logs in to the Web interface, the user is
immediately prompted to change the current password.

Valid = User can log in to the Web interface as normal.

Failed Access = This state is automatically set for users that
exceed a user-defined number of failed login attempts, set by the
'Deny Access on Fail Count' parameter (see 'Configuring Web
Security Settings' on page 72). These users can log in only after a
user-defined timeout configured by the 'Block Duration' parameter
(see below) or if their status is changed (to New or Valid) by a
System Administrator or Master.

Old Account = This state is automatically set for users that have
not accessed the Web interface for a user-defined number of days,
set by the 'User Inactivity Timer' (see 'Configuring Web Security
Settings' on page 72). These users can only log in to the Web
interface if their status is changed (to New or Valid) by a System
Administrator or Master.
Notes:

The Old Account status is applicable only to Admin and Monitor
users; System Administrator and Master users can be inactive
indefinitely.

For security, it is recommended to set the status of a newly added
user to New in order to enforce password change.
Defines the duration (in days) of the validity of the password. When
this duration elapses, the user is prompted to change the password;
otherwise, access to the Web interface is blocked.
The valid value is 0 to 10000, where 0 means that the password is
always valid. The default is 90.
Defines the maximum number of Web interface sessions allowed for
the user. In other words, this allows the same user account to log in to
the device from different sources (i.e., IP addresses).
The valid value is 0 to 5. The default is 2.
Note: Up to 5 users can be logged in to the Web interface at any
given.
Defines the duration (in minutes) of Web inactivity of a logged-in user,
after which the user is automatically logged off the Web interface.
The valid value is 0 to 100000. The default is according to the settings
of the 'Session Timeout' global parameter (see 'Configuring Web
Security Settings' on page 72).
Defines the duration (in seconds) for which the user is blocked when
the user exceeds a user-defined number of failed login attempts. This
is configured by the 'Deny Access On Fail Count' parameter (see
'Configuring Web Security Settings' on page 72).
The valid value is 0 to 100000, where 0 means that the user can do
as many login failures without getting blocked. The default is
according to the settings of the 'Deny Authentication Timer' parameter
(see 'Configuring Web Security Settings' on page 72).
Note: The 'Deny Authentication Timer' parameter relates to failed
Web logins from specific IP addresses.
70
Mediant 600 & Mediant 1000
Description
Document #: LTRT-83313