Lockout Policies Overview

You can use lockout policies to lockout a user for a length of time or permanently.

Note: This replaces the Failed Login Tracking and Account Locking option for the SFTP Server adapter.
You can customize a lockout policy by setting:

  • Number of signon attempts to allow before a user is locked out.

  • Whether the lockout is permanent or for a specified time period.

  • Whether the policy applies to all instances of the adapter (protocol level) or only to adapter instances that you choose (instance level).

  • Which protocol the policy applies to: FTP or SFTP.

When planning lockout policies, consider the following:

  • If the lockout period is permanent, the user is locked out until the lock is cleared by an application administrator.

  • For protocol level policies, all instances of the protocol (SFTP/FTP) are affected.
  • There can be only one policy defined at the protocol level at any given time.
  • Instance level policies take precedence over protocol level policies.

Define a Lockout Policy

To define a lockout policy:

  1. From the Administration Menu, select Deployment > Adapter Utilities > Policy Configuration.
  2. Next to New Policy, click Go!
  3. Select Lockout Policy and click Next.
  4. Enter the Policy Name.
  5. Enter Description.
  6. Select the Maximum number of Invalid Login Attempts allowed.
  7. Select the Lockout Type: Permanent or Time Based.
  8. If you selected, Time Based, enter the lockout out Time Period in Mins (minutes).
  9. Select the Protocol: FTP or SFTP.
  10. Select the Level at which this policy is applied: Protocol or Instance.
  11. Click Next.
  12. Review the policy configuration.
  13. Click Finish to create the policy.

Clear a Lock set by a Lockout Policy

The Lockout Policy Manager enables an Policy Lock Manager to clear a lock for a user. Only users who have permission to clear locks, will have the Policy Lock Manager displayed in the Admin Console. After the lock is cleared, the user regains access to the instances.

To clear a lock:

  1. From the Administration Menu, select Deployment > Adapter Utilities > Policy Lock Manager.

  2. Search for the lock by User Name, Lockout Type, Start Date, or End Date. After you enter the search criteria, click Go! The lockout information is displayed.

  3. Clear the lock checkbox.
  4. Click Finish.

Disable a Lockout Policy

To disable a lockout policy:

  1. From the Administration Menu, select Deployment > Adapter Utilities > Policy Configuration.

  2. In the List panel, in By Policy Type, select Lockout Policy and click Go! A list of the lockout policies are displayed.

  3. Clear the Enabled checkbox for the policy you want to disable. A warning message is displayed to letyou know that any locked users are now unlocked. You need to click OK to disable the policy. If you select Cancel, the lockout policy remains.

Enable a Lockout Policy

To enable a lockout policy that has been disabled:

  1. From the Administration Menu, select Deployment > Adapter Utilities > Policy Configuration.

  2. In the List panel, in By Policy Type, select Lockout Policy and click Go! A list of the lockout policies are displayed.

  3. Check Enabled for the policy you want to enable.
  4. Click Next.

Edit a Lockout Policy

To edit a lockout policy:

  1. From the Administration Menu, select Deployment > Adapter Utilities > Policy Configuration.

  2. In the List panel, in By Policy Type, select Lockout Policy and click Go! A list of the lockout policies are displayed.

  3. Select Edit for the policy you want to enable.
  4. Review and update as required.
  5. Review the updates.
  6. Click Finish to update the policy.

Delete a Lockout Policy

To delete a lockout policy:

  1. From the Administration Menu, select Deployment > Adapter Utilities > Policy Configuration.

  2. In the List panel, in By Policy Type, select Lockout Policy and click Go! A list of the lockout policies are displayed.

  3. If the policy you want to delete is enabled, clear the Enabled checkbox.

  4. Click Next. A warning message is displayed to let you know that any locked users are now unlocked. You need to click OK to confirm the disable.

  5. Select Delete for the policy you want to delete.
  6. Review and confirm that you want to delete the policy, as the action can not be reversed.
  7. Click Delete.