For example, you might determine that during a 40 hour week, the normal condition is for users to submit about 1,000 valid barrier codes and 150 invalid barrier codes. That is, about 3.75 invalid barrier codes submitted per hour.

With this information, you might decide to declare that a security violation occurs during any hour in which eight invalid barrier codes are submitted. If you know that during an 8-hour period, about 30 invalid codes are submitted, you might set the threshold to count a security violation when 40 invalid codes are submitted within eight hours.

You can administer SVN to place a referral call to the location of your choice whenever the established thresholds are reached. All SVN referral calls are priority calls.

Invalid attempts accumulate at different rates for login, authorization-code, remote-access, and station-security code depending on feature usage and the number of users on a server. For this reason, you administer thresholds separately for each type of violation.