Enabling Brute-Force Attack Protection

To enable cookie-based brute-force attack protection and configure its parameters, perform these steps:

1. Go to System > Settings > System Properties in the Core group.
2. Click Edit. Scroll down the list of system properties.
3. Select the Password brute force attack protection check box.

4. Configure the following parameters for this option amongst the list of system properties:

   1. Failed login attempts checking period (minutes): Specify the period in minutes, during which the system counts login failures.
   2. User locking period after too many authentication errors (minutes): Specify the length of the temporary lock-out period in minutes.
   3. Maximum authentication attempts before locking user: Specify the number of sequential failed login attempts after which CloudBlue Commerce locks the user out.
5. Click Submit to save the changes.