Simply check off "Immediately lock out invalid usernames" under options. Unless you have "ADMIN" as a user, they only get one attempt before they are blocked for up to 60 days. The important thing is to use strong passwords and use a low number or failed login attempts. I have been getting attempts blocked for the actual (obfuscated) admin user which is something like "hez3%QFJ35".
↧