ā11-12-2015 07:00 PM - edited ā03-18-2019 05:12 AM
Hi
Does someone have used "Maximum authorizations per period" when using Expressway on MRA ?
What it does ? I am trying to mitigate blocked accounts when trying multiples login from jabber client but is not working..
-Alex
ā11-12-2015 08:28 PM
Hi Alex,
The Expressway can limit the number of times that any user's credentials can be used, in a given configurable period, to authorize the user for collaboration services. This feature is designed to thwart inadvertent or real denial of service attacks, which can originate from multiple client devices authorizing the same user, or from clients that reauthorize more often than necessary.
Each time a client supplies credentials to authorize the user, the Expressway checks whether this attempt would exceed the Maximum authorizations per period within the previous number of seconds specified by the Rate control period.
If the attempt would exceed the chosen maximum, then the Expressway rejects the attempt and issues the HTTP error 429 "Too Many Requests".
The authorization rate control settings are configurable in the Advanced section of the Configuration > Unified Communications > Configuration page.
Manish
- Do rate helpful posts -
ā11-12-2015 09:09 PM
Hi Manish
Thats what's the manual says.
What i need is a real life experience on how to use it since looks like jabber on MRA does not use that parameter for pereventing multiples logons attempts.
- Alex
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide