

Tip! When you set this passphrase, the characters are masked and it does not appear in simple text again.

When a user is authenticated and tries to authenticate again, you can select whether the first user session is terminated when an additional session is authenticated, or if the additional sessions are rejected. If you select this option, you can specify the number of times your users can use the same credentials to log in to one authentication server from different IP addresses.

To restrict your users to a specific number of authenticated sessions, select Limit concurrent user sessions to. Global authentication settings for concurrent user sessions do not apply to mobile VPN sessions. This is useful for guest accounts or in laboratory environments. This option allows users to authenticate to the authentication server more than once at the same time. Allow Unlimited Concurrent Login Sessionsīy default, the Allow unlimited concurrent firewall authentication logins from the same account option is selected. For example, if you unlock a user account and select the option to reset the passphrase, the new passphrase must meet the minimum length requirement.
#Vpn unlimited authentication failed upgrade#
Passphrases for current Firebox-DB users are not changed when you upgrade to Fireware v12.2.1 or higher, but any new passphrases selected for current accounts must meet the minimum passphrase requirement. The maximum passphrase length is 32 characters and cannot be changed. This setting controls only the minimum passphrase length.

The minimum passphrase length setting applies to: You can specify a value between 8 and 32 characters. In Fireware v12.2.1 or higher, you must specify the minimum number of characters for a passphrase. When case-sensitivity is enabled, users must type their user names with the same capitalization you used when you defined the user accounts. You can also specify whether the user names that you define in the Firebox internal database are case sensitive. You can create the user accounts for Firebox Authentication and specify which users can authenticate to your Firebox. When the configuration file is exported to a clear text file (such as for communication between the Firebox and a Fireware device configuration management tool), the passphrase is further encrypted with an AES key wrap. To make sure that the credentials for each user account stored on your Firebox are secure, the passphrase that you specify for each user account is encrypted with an NT hash in the device configuration file. Define a New User for Firebox Authenticationįirebox Authentication, also known as Firebox-DB authentication, enables you to store on your Firebox the user accounts that you create to give your users access to your network.
