Fortinet white logo
Fortinet white logo

CLI Reference

system security authserver

system security authserver

Use this command to modify authentication reputation used to prevent password guessing attempts. The client IP addresses in the exempt list will bypass the security checks.

Syntax

config system security authserver

set status {enable | disable | monitor-only}

config exempt-list

edit <rule_index>

set sender-ip-mask <client_ipv4mask>

end

set access-group {cli mail web}

set block-period <minutes_int>

end

Variable

Description

Default

<rule_index>

Enter the ID for the rule.

access-group {cli mail web}

Select which access methods are tracked:

  • cli: FortiMail CLI access via SSH

  • mail: Mail client access via SMTP(S), IMAP(S), POP3(S)

  • web: Administrator and webmail access via HTTP(S)

cli mail web

block-period <minutes_int>

Enter the block period in minutes.

10

sender-ip-mask <client_ipv4mask>

Enter the client's IP address and subnet mask, or enter 0.0.0.0/0 to effectively exempt all IP addresses.

status {enable | disable | monitor-only}

Enable, disable, or only log (but do not block) the results of authentication reputation.

enable

Related topics

system authserver

system firewall

system security authserver

system security authserver

Use this command to modify authentication reputation used to prevent password guessing attempts. The client IP addresses in the exempt list will bypass the security checks.

Syntax

config system security authserver

set status {enable | disable | monitor-only}

config exempt-list

edit <rule_index>

set sender-ip-mask <client_ipv4mask>

end

set access-group {cli mail web}

set block-period <minutes_int>

end

Variable

Description

Default

<rule_index>

Enter the ID for the rule.

access-group {cli mail web}

Select which access methods are tracked:

  • cli: FortiMail CLI access via SSH

  • mail: Mail client access via SMTP(S), IMAP(S), POP3(S)

  • web: Administrator and webmail access via HTTP(S)

cli mail web

block-period <minutes_int>

Enter the block period in minutes.

10

sender-ip-mask <client_ipv4mask>

Enter the client's IP address and subnet mask, or enter 0.0.0.0/0 to effectively exempt all IP addresses.

status {enable | disable | monitor-only}

Enable, disable, or only log (but do not block) the results of authentication reputation.

enable

Related topics

system authserver

system firewall