FrancoisD.20899 (Security) asked a question.
protect accounts to prevent them from being locked by attackers
Hello.
We deployed a Okta policy to locked the account after 5 failed attempts for 5 minutes for a web applciation.
But some script kiddies try to guess the password, and change IP using a free proxy list every 30 seconds. With more than 500 free proxy, updated every days, manually blocked the IPs is not a solution.
Legitimate users are now blocked.
What is the best solution to prevent this, without adaptive MFA, to prevent this situation.
Thanks
If the attacks are starting on Office 365, the best way to combat the account lockouts when Adaptive MFA is unavailable is to disable legacy auth protocols (EAS/POP3/IMAP) on the Office 365 side which are the most popular attack vector at this point. There are possible repercussions for this to your end users, so please verify ahead of time that this is an acceptable resolution.
Thank you,
BJ Lillo
Senior Technical Support Engineer
Okta Global Customer Care