CRM Administrator can configure following Setting:

• Active – activate or deactivate Brute Force function
  User Name
• Block user after number of login attempts – define, after how many login attempts user will be blocked
• Time lock (minutes) – for how long user will be blocked in minutes
  IP address
• Block the IP address by the number of blocked users – define, after how many locked users, IP address will be blocked
• Time lock (minutes) – for how long will be IP blocked in minutes
• Blocked IP tab – list of blocked IP addresses
• Invalid Logins tab – list of invalid logins in to your Vtiger.
• Required Actions – option to Update files, this needs to be done in order to use this extension!

If you finish the installation of our module Brute Force, you are able to access the settings as Admin and set the login policies for all users in your CRM system

• In the Settings you have 4 tabs: Settings, Blocked IP, Invalid logins & Required actions
• Blocked IP is just list of IP addresses which were blocked already, there is no option for editing its just informational tab
• Settings tab is main tab for Admin where you can setup login policies
• Start with Edit button on the right, you don’t need to have a User Name and IP address features active in the same time, its all up to you if you want to block just users or block IP address also
• In Edit window first make sure to check Active status, next set how many attempts can be made by user until he will be blocked, also set a Time lock in minutes
  Example: Block user after the number of login attempts set to 3 and Time lock set to 15, the result is if the user will use wrong password 3 times he will be blocked and can’t log in for 15 minutes
• Next, you can use also IP address block feature, you can block IP based on how many users tried logging in to your CRM with incorrect credentials and for how long IP block will last
  Example: Block the IP address by the number of blocked users set to 3 and Time lock set to 60, the result is if 3 users will be blocked, the IP is blocked too for 60 minutes. After 60 minutes hold is removed and you and users can log back in
   You can see the whole process in the “Video tab”
• Invalid Logins tab – list of invalid logins in to your Vtiger.
• Required Actions – option to Update files, this needs to be done in order to use this extension!

• 2 September 2021: 4.3
  • fixed issue where inserting the wrong password didn’t show wrong password alert on the login page
  • fixed post uninstall issues where after uninstalling the Brute Force, the password rules were still present, not the password rules will revert back to Vtiger ones

— 2020 —

• 22 October 2020: 4.2
  • fixed file path for login.tpl file in Required actions tab
• 26 August 2020: 4.1
  • added tab “Required actions” where users have the option to update login files required to fully use the Brute Force extension
  • added tab “Invalid logins” where users can see a list of unsuccessful login attempts
  • added notifications icon for admin to see messages about users being locked down due to incorrect input
• 10 January 2020: 4.0
  • new validation system via our FREE extension Installer

— 2019 —

• 29 May 2019: 600.700.1.3
  • minor bug fixes
•  25 April 2019: 600.700.1.2
  • minor bug fixes
• 15 April 2019: 600.700.1.1
  • extension release for Vtiger 6.x
  • same installation package for Vtiger 7.x & Vtiger 6.x
  • fixed issue with licensing
• 1 March 2019: 700.0.1
  • extension release for Vtiger 7.x