Login Failure Limit
[Settings] > [Account Settings] > [Login Failure Limit]
This is a feature that automatically locks the account when the number of failed administrator login attempts exceeds the allowed limit, blocking brute force attempts.
⚠️ The 'Login Failure Limit' setting permission is granted to [Administrator Type - Super Administrator], and
Policy settings can be configured in [Settings] > [Account Settings] > [Login Failure Limit].
The unlocking of a locked account is performed in the [Admin] > [Admin List] tab.
▷ Screen Configuration Description
| item | Explanation |
|---|---|
| Usage status | Feature Activation Status (ON / OFF) |
| Failure Allowance Count | Account lockout after N consecutive login failures |
| Locking Method | 자동 해제 / 영구 잠금Select 중 |
| Lock Duration | 자동 해제Lock retention time when selected (in minutes) |
The scope of application is uniformly applied to all super administrators and integrated system administrators, and it is not a separate configuration item.
The settings for failure allowance count, lock method, and other items are explained at the top of the screen in the alert regarding the restriction method and operation.
▷ Comparison of Locking Methods
| Locking Method | Action |
|---|---|
| Automatic Release | After the set duration has elapsed following the lock, it will be automatically released. It will return to a state where normal login attempts are possible. |
| Permanent Lock | The lock will be maintained until the administrator manually releases it. Recommended in environments with high security strength. |
▷ Action when a lock occurs
- Lock the account immediately upon reaching the allowed number of attempts.
- Display guidance message when attempting to log in with a locked account
- Automatic Release: "Your account has been temporarily locked due to a login failure. Please try again later."
- Permanent Lock: "Your account has been locked due to failed login attempts. Please contact the administrator to unlock it."
- No separate notifications will be displayed to other administrators.
- The lock status is displayed in the administrator list status column (Locked (released after N minutes)/Locked (permanent)/Unlocked) and can also be checked in the audit log.
▷ Failure Count Action
- Only consecutive login failures are accumulated (no time window).
- The count is reset to 0 upon successful normal login or unlock.
▷ Manual Unlock of Locked Account
Accounts in a permanent locked state are released by the super administrator in the [Administrator List] tab.
- [Admin] > [Admin List] Tab Entry
- Select Target Account
- Unlock Execution
▷ Emergency Recovery
If all administrator accounts are locked at the same time, it cannot be recovered using the console alone.
- You can disable it once by directly accessing the server and modifying the CLI commands or configuration files.
- Refer to the operation guide for detailed procedures.
It is assumed that an operator with server access rights performs emergency recovery. No separate lockout exemption account will be provided.
Reference Note
- This feature operates independently of IP-based access control, and when used together, the security strength is further enhanced.
- Login attempts for inactive accounts are immediately rejected and do not accumulate in the failure count.
- Policy changes and lock/unlock events are all recorded in the audit log.