Tutorial: Configure the Authentication Failure Lockout Policy
Overview
Access Server automatically locks out user accounts after repeated failed authentication attempts to prevent brute-force attacks. When locked out, users see messages like "LOCKOUT" or "User temporarily locked out due to multiple authentication failures."
The lockout triggers after five failed attempts within 15 minutes and expires after 15 minutes. Admins can modify lockout settings or manually lift a lockout if needed.