Change the security settings to enforce minimum password complexity, disable service users temporarily and IP Office users permanently on bad logins.
-
If a Service user fails to login 3 times within 10 minutes, the account will be locked for 60 seconds.
-
If an IP Office user fails to login 5 times within 10 minutes, account will be locked permanently and the administrator will be required to unlock the account using IP Office Manager.
NOTE: This recommended IP Office user password policy must always be enforced if the system is potentially accessible from unsecured networks including the Internet; for example when SIP trunks or VoIP remote worker/extensions are supported.
In IP Office Manager security settings General tab:
|
Settings
|
|
Set Service User Details
|
-
Minimum Name Length to 6.
-
Minimum Password Length to 8.
-
Password Reject Action to Log and Temporary Disable.
-
Minimum Password Complexity to 'Medium.
-
Previous Password Limit (Entries) to 4.
|
|
Set IP Office User Details
|
-
Password Enforcement to on.
-
Minimum Password Length to 8.
-
Minimum Password Complexity to 'Medium.
-
Password Reject Limit to 5.
-
Password Reject Action to Log and Disable Account.
|
Note: The
IP Office user password policy only applies to the password field, not the voicemail or user login code. See
Password and PIN Management for more information.
