3.14.10 Brute Force Prevention
Menu path
You can find this information in MSPS devices under "Security > Brute Force
Prevention"
Recommendation
"Brute Force Prevention" ("BFP") lets you limit the number of incorrect login
attempts made within a certain time frame.
Define a maximum number of invalid login attempts for a user whom the device
accepts. Further login attempts for this user will be blocked for a certain period.
3.14.11 Turn off firewall with SCALANCE S/M
Menu path
You can find this information for MSPS devices under "Security > Firewall >
General".
Note
With SCALANCE S/M devices, you can completely disable the firewall in the
settings.
Disabling the firewall has a side effect that is easy to miss.
As one may expect, all communication between the interfaces is no longer
subjected to filtering.
In addition, all rules that limit access to the module services become inactive. This
means that all settings made under "Predefined" become void. All services of the
device are reachable at all interfaces.
Especially with SCALANCE M devices with a direct WAN interface, disabling the
firewall is strongly discouraged.
Recommendation
Do not disable the firewall. If you wish to disable the firewall for testing purposes,
create pertinent rules under "IP rules".
Modify the "TCP Idle Timeout". At 24 hours, the time preset is very long. A timeout
on the order of UDP/ICMP typically works just as well.
To Next Page
Loading...
Need help?
General
