How do I change the maximum number of login failures and lockout duration?

Hello,

If the function of locking the administrator account upon authentication failure is enabled, the administrator account is locked when the number of authentication failures reaches the value of this parameter. In this case, the administrator account is not allowed to log in to the system within a period of time. The function of locking the administrator account does not take effect for the system administrator admin or the administrator who logs in through the console port. After the administrator account is locked, the account fails to be used to log in to the system even if the IP address is changed or the account is used to log in to the system in other modes (except the console port mode). The account is automatically unlocked after the locking time expires. By default, the account is locked for 30 minutes after three consecutive login failures. To change the password, perform the following steps:

[NGFW] aaa
[NGFW-aaa] lock-authentication enable
[NGFW-aaa] lock-authentication failed-count 3
[NGFW-aaa] lock-authentication timeout 30

Glad to help you! Any further questions, let us know.