User guide

8-29
Cisco Media Gateway Manager 5.0 User Guide
OL-5461-02
Chapter 8 Managing Security
How Do I Manage User Security?
Table 8-16 Field Descriptions for the Security Properties Pane
Tab Field Description
Cisco MGM
Security
Password Aging Number of days before the password expires. The user is prompted to change the
password after the specified number of days. The range is 0 to 999 days; the default is 30
days. A value of 0 disables this feature.
Max Retries Maximum number of login attempts a user is allowed before being denied access. The
range is 0 to 10 retries; the default is 5 retries. A value of 0 disables this feature.
Note When the number of login attempts is exceeded for a given user, Cisco MGM
generates an alarm. Alarm information includes the username and IP address of
the client workstation where the final login attempt was made.
Infinite Enable or disable infinite user lockout. If checked, Cisco MGM does not automatically
re-enable the account, but always requires the intervention of a user with the appropriate
user profile to re-enable.
Login Disable
Period
Number of seconds a user’s login is disabled after the maximum login retries value is
exceeded. The range is 0 to 600 seconds; the default is 30 seconds. A value of 0 disables
this feature and the Max Retries feature.
For example, if the maximum number of retries is 5 and the login disable period is 30
seconds, the user account will be disabled for 30 seconds after the fifth failed login
attempt.
Note If you check the Infinite check box, the Login Disable Period field is grayed out.
The user will not be allowed to log in until that user’s login state is re-enabled
from the Cisco MGM Users table.
Enable Cisco
MGM Security
Advisory
Message
If checked, the advisory message that appears on login is enabled. Uncheck to disable the
login advisory message.
Lockout Enable If checked, Cisco MGM automatically locks the current session after the period in the
Lockout Period field.
Note If both Lockout Enable and Logout Enable are checked, logout only occurs after
the lockout period.
Lockout Period Number of minutes a user’s Cisco MGM session is inactive before Cisco MGM
automatically locks the user out. The range is 0 to 120 minutes in 1-minute increments;
the default is 30 minutes. A value of 0 disables this feature.
Logout Enable If checked, Cisco MGM automatically logs the user out of the Cisco MGM session after
the period in the Logout Period field.
Logout Period Number of minutes a user’s Cisco MGM session is inactive before Cisco MGM
automatically logs the user out. The range is 0 to 1440 minutes in 1-minute increments.
A value of 0 disables this feature.