AudioCodes Mediant 4000 SBC User Manual page 64


To configure Web user sessions and access security:
1. Open the Web Settings page (Setup menu > Administration tab > Web & CLI folder
> Web Settings).
2. Under the Session group, configure the following parameters:
•
'Password Change Interval': Duration (in minutes) of the validity of the Web login
passwords. When the duration expires, the user must change the password in
order to log in again.
•
'User Inactivity Timeout': If the user has not logged into the Web interface within
this duration, the status of the user becomes inactive and the user can no longer
access the Web interface. The user can only log in to the Web interface if its
status is changed (to New or Valid) by a Security Administrator or Master user
(see ''Configuring Management User Accounts'' on page 58).
•
'Session Timeout': Duration (in minutes) of inactivity (i.e., no actions are
performed in the Web interface) of a logged-in user, after which the Web session
expires and the user is automatically logged off the Web interface and needs to
log in again to continue the session. You can also configure the functionality per
user in the Local Users table (see ''Configuring Management User Accounts'' on
page 58), which overrides this global setting.
3. Under the Security group, configure the following parameters:
•
'Deny Authentication Timer': Interval (in seconds) that the user needs to wait
before logging in from the same IP address after reaching the maximum number
of failed login attempts (see next step).
•
'Deny Access On Fail Count': Number of failed login attempts (e.g., incorrect
username or password) after which the device blocks access to the user for a
user-defined duration (previous step).
4. Click Apply.
For a detailed description of the above parameters, see ''Web Parameters'' on page 718.
User's Manual
Figure 6-22: Configuring Web User Sessions
Figure 6-23: Configuring Web User Security
64
Mediant 4000 SBC
Document #: LTRT-41729