Protection Tab
See also
These settings are also configurable from the Web Manager. See Threat Prevention.
The Protection tab allows managing security-related configurations and setting up protections that ensure secure access and usage of the Thinfinity® Workspace environment.
| Option | Description |
|---|---|
| Enable brute force detection | Helps protect against brute force attacks, where attackers attempt to gain access by guessing passwords through repeated login attempts. Selecting this option enables the associated fields, Max. login attempts, Re-enable after, and Contention time. On new installations this option is enabled by default; installations upgraded from an earlier version keep their existing setting. |
| Contention time | The delay, in seconds, that the server waits before responding to a failed login attempt, which slows down automated password guessing. The default is 1 second; enter 0 to disable the delay, up to a maximum of 10 seconds. |
| Allow Forwarding Headers | Enables or disables the use of forwarding headers (such as X-Forwarded-For) to track the original IP address of a client when requests pass through a proxy or load balancer. |
| Allow list | Allows administrators to specify trusted IP addresses or ranges that are explicitly permitted access to Thinfinity Workspace. |
| Deny list | Allows administrators to block specific IP addresses or ranges from accessing Thinfinity Workspace. |
Info
Failed login attempts are tracked per browser session rather than per source IP address. Users who share a public IP address — for example, behind NAT or a corporate proxy — are therefore not locked out as a group when one of them exceeds the attempt limit.
Info
Changes to Brute Force Detection and IP filtering apply without restarting the gateway. The gateway re-reads the configuration — both the settings and the Allow and Deny list files — within a few seconds of the save; no restart is required.