Failed login delay
Standards security requires that the system to have at least four seconds of delay after a failed logon attempt before a reattempt. This delay is a measure to counter brute force or dictionary attacks.
By default, the SSMC web application inherently meets this requirement. However, the SSH interface for appliance logons, requires additional configuration to meet the requirement. After being configured, a delay of at least four seconds is also enforced on the SSH interface, between any two consecutive failed logon attempts.
To enable failed login delay for the SSH interface, execute the following command:
sudo /ssmc/bin/config_security.sh -o config_failedlogin_delay -a enable –f
To disable failed login delay for the SSH interface (reset to defaults), execute the following command:
sudo /ssmc/bin/config_security.sh -o config_failedlogin_delay -a disable –f