Hi,
I have a question.
Are the failed login attempts correlated to the username that is used? Or is it simply based on IP?
We have a large network of users on a single corporate IP and I think the login failures are being accrued across multiple usernames on their single outbound IP.
For example, if our failed attempt level is set to 10.
If we have 5 failed attempts on "test123" and 5 failed attempts on "test456" will any further failed attempts (within 5 min) be blocked from the same IP?
Thanks,
Joe