Siemens SIMATIC NET SCALANCE SC-600 Configuration Manual page 344

Configuring with Web Based Management
4.7 "Security" menu
Description
The page contains the following boxes:
• User Specific BFP is Enabled. / User Specific BFP is Disabled.
– Enabled:
– Disabled:
Authentication".
• Acceptable Invalid Login Attempts Per User
The maximum number of invalid login attempts for a user accepted by the device.
Further login attempts for this user are blocked for a specific time.
The users that are not configured as local users for the device are summarized under
the user name "UnknownUser".
0: User Specific BFP is Disabled.
• IP Specific BFP is Enabled. / IP Specific BFP is Disabled.
Shows whether the IP-specific Brute Force Prevention is enabled.
• Acceptable Invalid Login Attempts Per IP
The maximum number of invalid login attempts for an IP address accepted by the
device. Further login attempts for this IP address are blocked for a specific time.
0: IP Specific BFP is Disabled.
• Trigger Interval BFP [min]
The time in minutes that is relevant for counting invalid login attempts.
If the maximum number of invalid login attempts is exceeded during this time, the
device blocks login for a specific period of time.
Invalid login attempts per user and per IP address are handled independently of one
another.
• BFP Automatic Reset Timer [min]
Time in minutes for which the device blocks login because the maximum number of
invalid login attempts was exceeded.
0: The timer is disabled.
344
With login authentication, the "Local" or "Local and RADIUS" mode is set and the
maximum number of invalid login attempts is greater than 0.
With login authentication, the "RADIUS" or "RADIUS and fallback Local" mode is
set or the maximum number of invalid login attempts is 0.
You configure the login authentication under "Security > AAA > General > Login
SCALANCE SC-600 Web Based Management (WBM)
Configuration Manual, 10/2021, C79000-G8976-C475-03