Web Parameters

Defines the minimum duration (in minutes) between login password changes. For example, if you configure the parameter to 60, you can only change the password if at least 60 minutes has elapsed since the password was last changed.

The valid value is 0 to 100,000. The default is 0, meaning that the password can be changed at any time.

Defines the duration (in days) for which a user has not logged in to the Web interface, after which the status of the user becomes inactive and can no longer access the Web interface. These users can only log in to the Web interface if their status is changed (to New or Valid) by a Security Administrator or Master user.

The valid value is 0 to 10000, where 0 means inactive. The default is 90.

Note: The parameter is applicable only when using the Local Users table.

Defines the duration (in minutes) of inactivity of a logged-in user in the Web interface, after which the user is automatically logged off the Web session. In other words, the session expires when the user has not performed any operations (activities) in the Web interface for the configured duration.

The valid value is 0, or 2 to 100000, where 0 means no timeout. The default is 15.

Note: You can also configure the feature per user in the Local Users table (see Configuring Management User Accounts), which overrides this global setting.

Defines the maximum number of failed login attempts, after which the requesting IP address (management station) for all users is blocked.

The valid value range is 0 to 10. The value 0 means that the feature is disabled and no blocking is done. The default is 3.

Defines the duration (in seconds) for which login to the Web interface is denied from a specific IP address (management station) for all users when the number of failed login attempts exceeds the maximum. This maximum is configured by the [DenyAccessOnFailCount] parameter. Only after this time expires can users attempt to log in from this same IP address.

The valid value is 0 to 100000, where 0 means that login is not denied regardless of the number of failed login attempts. The default is 60.

Note:

Defines the number to multiple the previous blocking time for blocking the IP address (management station) or user upon the next failed login scenario.

The valid value is 1 to 100. The default is 1, which means that the blocking time remains the same (not increased).

For example, assume the following configuration:

After three failed login attempts, the device blocks the user for 10 seconds. If the user tries again to login but fails after three attempts, the device blocks the user for 20 seconds (i.e., 10 x 2). If the user tries again to login but fails after three attempts, the device blocks the user for 40 seconds (i.e., 20 x 2), and so on.

Defines the maximum time interval (in seconds) between failed login attempts to be included in the count of failed login attempts for denying access to the user.

The valid value is 30 to 10,000,000. The default is 60.

For example, assume the following:

If the user makes a failed login attempt, and then makes another failed login attempt 32 seconds later, and another failed login attempt 10 seconds later, the user is not blocked by the device. This is because the interval between the first and second attempt was greater than the 30 seconds configured for the [DenyAccessCountingValidTime] parameter. However, if the interval between all three failed login attempts is less than 30 seconds, the device blocks the user.

Enables the display of the user's login information upon each successful login attempt.

Defines the information that is provided in the logged error message (Activity Log) when a user attempts to log in to the device with the wrong username or password (i.e., authentication failure).

Enables cross-site request forgery (CSRF) protection of the device's embedded Web server.

For more information, see Enabling CSRF Protection.

Defines the LAN HTTP port for Web management. To enable Web management from the LAN, configure the desired port.

The default is 80.

Note: For the parameter to take effect, a device restart is required.

Defines if the entire Web interface is read-only.

When in read-only mode, parameters can't be modified and the following pages can't be accessed: Web User Accounts, TLS Contexts, Time and Date, Maintenance Actions, Load Auxiliary Files, Software Upgrade Wizard, and Configuration File.

Note:

Enables the device to restore the default management user accounts.

Note:

acSysWEBAccessUserName:<current username>/<password>/<new username>

acSysWEBAccessUserCode:<username>/<current password>/<new password>

Enables the weak password detection feature, which detects if a user in the Local Users table is configured with a weak password (listed in the Weak Passwords List table).

For more information, see Detection of Weak Passwords.

Defines a welcome message displayed on the Web interface's Web Login page.

The format of the ini file table parameter is:

[WelcomeMessage ]
FORMAT Index = Text
[\WelcomeMessage]

For example:

FORMAT Index = Text
WelcomeMessage 1 = "**********************************" ;
WelcomeMessage 2 = "********* This is a Welcome message ***" ;
WelcomeMessage 3 = "**********************************" ;

For more information, see Creating a Login Welcome Message.

Note:

Enables the option to customize the name of the device (product) that appears in the management interfaces.

For more information, see Customizing the Product Name.

Defines a name for the device instead of the default name.

The value can be a string of up to 29 characters.

For more information, see Customizing the Product Name.

Note: To enable customization of the device name, see the [UseProductName] parameter.

Enables the Web interface to display user-defined text instead of an image (logo).

For more information, see Replacing the Corporate Logo.

Note: If you want to display text instead of an image, configure [UseWebLogo] to 1 and make sure that [LogoFileName] is not configured to any value. If [LogoFileName] is configured, it overrides [UseWebLogo] and an image will always be displayed.

Defines the text that is displayed instead of the logo in the Web interface.

The valid value is a string of up to 15 characters.

For more information, see Replacing the Corporate Logo with Text.

Note: The parameter is applicable only when the [UseWebLogo] parameter is configured to [1].

Defines the name of the image file that you want loaded to the device. This image is displayed as the logo in the Web interface (instead of the AudioCodes logo).

The file name can be up to 47 characters.

For more information, see Replacing the Corporate Logo with an Image.

Notes: