AudioCodes Mediant 800B User Manual page 65

User's Manual
Parameter
Web: Password Age
CLI: password-age
Web: Session Limit
CLI: session-limit
Web: Session Timeout
CLI: session-timeout
Web: Block Duration
CLI: block-duration
Version 6.8
defined timeout configured by the 'Block Duration' parameter (see
below) or if their status is changed (to New or Valid) by a System
Administrator or Master.

Old Account = This state is automatically set for users that have not
accessed the Web interface for a user-defined number of days, set
by the 'User Inactivity Timer' (see ''Configuring Web Security
Settings'' on page 67). These users can only log in to the Web
interface if their status is changed (to New or Valid) by a System
Administrator or Master.
Notes:

The Old Account status is applicable only to Admin and Monitor
users; System Administrator and Master users can be inactive
indefinitely.

For security, it is recommended to set the status of a newly added
user to New in order to enforce password change.
Defines the duration (in days) of the validity of the password. When this
duration elapses, the user is prompted to change the password;
otherwise, access to the Web interface is blocked.
The valid value is 0 to 10000, where 0 means that the password is
always valid. The default is 90.
Defines the maximum number of concurrent Web interface sessions
allowed for the specific user. For example, if configured to 2, the same
user account can be logged into the device's Web interface (i.e., same
username-password combination) from two different management
stations (i.e., IP addresses) at any one time. Once the user logs in, the
session is active until the user logs off (by clicking the Log off icon on
the toolbar) or until the session expires if the user is inactive for a user-
defined duration (see the 'Session Timeout' parameter below).
The valid value is 0 to 5. The default is 2.
Note: Up to 5 users can be concurrently logged in to the Web interface.
Defines the duration (in minutes) of inactivity of a logged-in user in the
Web interface, after which the the user is automatically logged off the
Web session. In other words, the session expires when the user has
not performed any operations (activities) in the Web interface for the
configured timeout duration.
The valid value is 0 to 100000. A value of 0 means no timeout. The
default value is according to the settings of the WebSessionTimeout
global parameter (see ''Configuring Web Security Settings'' on page
67).
Defines the duration (in seconds) for which the user is blocked when
the user exceeds a user-defined number of failed login attempts. This is
configured by the 'Deny Access On Fail Count' parameter (see
''Configuring Web Security Settings'' on page 67).
The valid value is 0 to 100000, where 0 means that the user can do as
many login failures without getting blocked. The default is according to
the settings of the 'Deny Authentication Timer' parameter (see
''Configuring Web Security Settings'' on page 67).
Note: The 'Deny Authentication Timer' parameter relates to failed Web
logins from specific IP addresses.
65
6. Web-Based Management
Description
Mediant 800B Gateway and E-SBC