Polycom RealPresence Group Series Administrator's Manual page 91

• Local interface
• Web interface
• Telnet interface
For examples of how the account lockout feature works, see the following scenarios.
• Admin Settings > Security > Local Accounts > Account Lockout > Lock Admin Account after
Failed Logins is set to 4.
• Admin Settings > Security > Local Accounts > Account Lockout > Admin Account Lock
Duration is set to 1 Minute.
• Admin Settings > Security > Local Accounts > Account Lockout > Reset Admin Account
Lock After is set to 1 Hour.
Scenario 1 - Admin account locked due to excessive failed logins
A user fails to log in to the Admin account twice on the system web interface, and the same or another
user fails to log in to the Admin account on the local interface. This means that three failed attempts have
been made to the Admin account so far. If the next attempt to log in to the Admin account on any login
port is unsuccessful, which would mean 4 failed logins, further attempts to access the Admin account are
locked out for 1 Minute (the expiration of the Admin Account Lock Duration period). After the 1 Minute
account lock duration has past, logins will once again be allowed. As this example illustrates, the failed
login attempts made to an account accumulate across any login port.
Scenario 2 - Successful login resets the failed login attempts counter
A user fails to log in to the Admin account twice on the system web interface, and the same or another
user fails to log in to the Admin account on the local interface. This means that three failed attempts have
been made to the Admin account so far. If the next login attempt is successful, then the failed login
attempts counter for the Admin account is reset to zero and now once again 4 failed attempts can be
made before the Admin account would be locked.
Scenario 3 - Failed attempts counter resets after failed login window closes
A user fails to log in to the Admin account twice on the system web interface, and the same or another
user fails to log in to the Admin account on the local interface. This means that three failed attempts have
been made to the Admin account so far. If no more failed attempts are made within 1 Hour of the first
failed attempt (which is the value of the Reset Admin Account Lock Counter After setting), the failed
login attempts counter for the Admin account is reset to zero, and 4 failed attempts are allowed again
before the Admin account is locked.
Configure Account Lockout
You can specify account lockout controls to prevent unauthorized access to your system.
Procedure
1. In the system web interface, go to Admin Settings > Security > Local Accounts > Account
Lockout.
2. Configure these settings for the appropriate account on the Account Lockout screen, then click
Save.
You can configure account lock for the admin account, user account, or both accounts.
Polycom, Inc.
Securing the System
89