GrouchyAdmin Posted August 10, 2021 Share Posted August 10, 2021 I recently upgraded the reset portal to v9300. Seemed to be OK, but now its giving me a Session Lockout page straight away when I go to the homepage. Had a quick search on here, and didn't find anything similar (I was searching for SessionLockout). Has anyone come across this before? Link to comment Share on other sites More sharing options...
support Posted August 10, 2021 Share Posted August 10, 2021 Hello, Can you please check if there is an IP Address blocked on the following screen on my first screenshot below? More than likely it will be the IP address of one of your network devices, instead of the client machine. So as per screenshot 2 below, you will need to configure your network device, and Passwordstate, for X-Forwarded Support, so the correct IP Address is detected. Regards Click Studios Link to comment Share on other sites More sharing options...
GrouchyAdmin Posted August 10, 2021 Author Share Posted August 10, 2021 Is this a new thing with with 9300? We've not had this issue before, we do front the reset portal using a Brocade load balancer. Link to comment Share on other sites More sharing options...
support Posted August 10, 2021 Share Posted August 10, 2021 Hello, Yes, this is a new security feature in version 9. Regards Click Studios Link to comment Share on other sites More sharing options...
GrouchyAdmin Posted September 14, 2021 Author Share Posted September 14, 2021 I had chance to talk to our network admin and he is suggesting that he can't do it because we have the site running under SSL, therefore its encrypted so there is no visibility to the web traffic. Neither of us have seen this before, is there a workaround or guides that can assist with this? Link to comment Share on other sites More sharing options...
support Posted September 14, 2021 Share Posted September 14, 2021 Hello. All load balancers should be able to be configured for X-Forwarded Support. We would recommend logging a support call with your Load Balancing vendor, and ask how this can be done. There currently is no way to disable this feature, for security reasons - typically customers install this module in their DMZ, so you do need to protect against these failed login attempts. If you go to the screen Administration -> Password Reset Portal Administration -> System Settings -> Miscellanous tab, you can increase this lockout value though. Regards Click Studios Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now