AudioCodes Mediant 500 E-SBC, User Manual

Page: 59 / 920

User's Manual 6. Web-Based Management
Version 6.8 59 Mediant 500 E-SBC
Parameter Description
defined timeout configured by the 'Block Duration' parameter (see
below) or if their status is changed (to New or Valid) by a System
Administrator or Master.

Old Account = This state is automatically set for users that have not
accessed the Web interface for a user-defined number of days, set
by the 'User Inactivity Timer' (see ''Configuring Web Security
Settings'' on page
61 ). These users can only log in to the Web
interface if their status is changed (to New or Valid) by a System
Administrator or Master.
Notes:

The Old Account status is applicable only to Admin and Monitor
users; System Administrator and Master users can be inactive
indefinitely.

For security, it is recommended to set the status of a newly added
user to New in order to enforce password change.
Web: Password Age
CLI: password-age Defines the duration (in days) of the validity of the password. When this
duration elapses, the user is prompted to change the password;
otherwise, access to the Web interface is blocked.
The valid value is 0 to 10000, where 0 means that the password is
always valid. The default is 90.
Web: Session Limit
CLI: session-limit Defines the maximum number of concurrent Web interface sessions
allowed for the specific user. For example, if configured to 2, the same
user account can be logged into the device’s Web interface (i.e., same
username-password combination) from two different management
stations (i.e., IP addresses) at any one time. Once the user logs in, the
session is active until the user logs off (by clicking the Log off icon on
the toolbar) or until the session expires if the user is inactive for a user-
defined duration (see the ‘Session Timeout’ parameter below).
The valid value is 0 to 5. The default is 2.
Note: Up to 5 users can be concurrently logged in to the Web interface.
Web: Session Timeout
CLI: session-timeout Defines the duration (in minutes) of inactivity of a logged-in user in the
Web interface, after which the the user is automatically logged off the
Web session. In other words, the session expires when the user has
not performed any operations (activities) in the Web interface for the
configured timeout duration.
The valid value is 0 to 100000. A value of 0 means no timeout. The
default value is according to the settings of the WebSessionTimeout
global parameter (see ''Configuring Web Security Settings'' on page
61 ).
Web: Block Duration
CLI: block-duration Defines the duration (in seconds) for which the user is blocked when
the user exceeds a user-defined number of failed login attempts. This is
configured by the 'Deny Access On Fail Count' parameter (see
''Configuring Web Security Settings'' on page
61 ).
The valid value is 0 to 100000, where 0 means that the user can do as
many login failures without getting blocked. The default is according to
the settings of the 'Deny Authentication Timer' parameter (see
''Configuring Web Security Settings'' on page
61 ).
Note: The 'Deny Authentication Timer' parameter relates to failed Web
logins from specific IP addresses.