In this exercise, we will configure the new AAA parameters to slow down any brute-force password attack. Pre-requisites The following exercises should be completed before proceeding: Exercise 1, Exercise 2 Step by step guidance Estimated time to complete this lab: 5 minutes. Step Action One of the new AAA features is the ability to define the maximum number of login attempts as well as a lockout timeout. While logged to the Site1-Win8Client, access the NetScaler configuration and navigate to Security -> AAA Application Traffic -> Virtual Servers. – Highlight the virtual server and click on aaa-df-vs Open. Define the Max Login Attempts. In this example, we will allow up to 3 login attempts. In the Failed Login Timeout parameter, set it to 1 min. This will prevent any authentication requests from the same user within the next 60 secs of the last failed attempt. Click OK. Close Firefox and then reopen it. Browse to . You should be redirected to the authentication page, enter the wrong credentials 3 times in a row in a period less than 60 secs. Username: user1 123 Password1: Password2: 123 Click Log On. At this point, the account has been flagged as temporarily locked out. Now, enter the user credentials once more. You should receive a message stating that you have exceeded the maximum number of attempts. Verify that this is the case.
In this exercise, we will configure the new AAA parameters to slow down any brute-force password attack. Pre-requisites The following exercises should be completed before proceeding: Exercise 1, Exercise 2 Step by step guidance Estimated time to complete this lab: 5 minutes. Step Action One of the new AAA features is the ability to define the maximum number of login attempts as well as a lockout timeout. While logged to the Site1-Win8Client, access the NetScaler configuration and navigate to Security -> AAA – Application Traffic -> Virtual Servers. Highlight the aaa-df-vs virtual server and click on Open. Define the Max Login Attempts. In this example, we will allow up to 3 login attempts. In the Failed Login Timeout parameter, set it to 1 min. This will prevent any authentication requests from the same user within the next 60 secs of the last failed attempt. Click OK. Close Firefox and then reopen it. Browse to . You should be redirected to the authentication page, enter the wrong credentials 3 times in a row in a period less than 60 secs. Username: user1 Password1: 123 Password2: 123 Click Log On. At this point, the account has been flagged as temporarily locked out. Now, enter the user credentials once more. You should receive a message stating that you have exceeded the maximum number of attempts. Verify that this is the case.
Syn2014_612.docx