Threat Prevention
These settings are also configurable from the Configuration Manager. See Protection Tab.
This functionality allows managing security-related configurations and setting up protections that ensure secure access and usage of Thinfinity® Workspace environment.
To access the Threat Prevention settings: in the main Thinfinity Workspace page, select the user profile to access the user menu and select Settings. Next, navigate to Configuration>Security>Threat Prevention.
In the Brute Force Detection area, the following options are available:
| Option | Description |
|---|---|
| Enable | Enables the Brute Force Detection feature. On new installations this option is enabled by default; installations upgraded from an earlier version keep their existing setting. |
| Max. Login attempts | By default, the maximum number of allowed login attempts is 3, change if applicable. |
| Re-enable after | The time interval after which the login page is again available. The default value is 10 minutes, modify if applicable. |
| Contention time | The delay, in seconds, that the server waits before responding to a failed login attempt, which slows down automated password guessing. The default is 1 second; enter 0 to disable the delay, up to a maximum of 10 seconds. |
| Allow Forwarding Headers | This option is selected by default and it enables the use of forwarding headers (such as X-Forwarded-For) to track the original IP address of a client when requests pass through a proxy or load balancer. |
Failed login attempts are tracked per browser session rather than per source IP address. Users who share a public IP address — for example, behind NAT or a corporate proxy — are therefore not locked out as a group when one of them exceeds the attempt limit.
In the IP filtering area, the following options are available:
| Option | Description |
|---|---|
| Allow list | Allows administrators to specify trusted IP addresses or ranges that are explicitly permitted access to Thinfinity Workspace. |
| Deny list | Allows administrators to block specific IP addresses or ranges from accessing Thinfinity Workspace. |
Selecting Add allows adding a new IP on the Allow or Deny lists.
Changes to Brute Force Detection and IP filtering apply without restarting the gateway. The gateway re-reads the configuration — both the settings and the Allow and Deny list files — within a few seconds of the save; no restart is required.