0

JOURNAL record count for userid is reset to zero

4

Invalid password journal count is maintained. Further attempts to access this userid from this specific terminal are disallowed.

8

JOURNAL record count for userid is reset to zero and a rule is added to the appropriate file; the rule prevents any terminal from logging on to user ID userid unless there are overriding rules that allow logon attempts:

For this
command

This rule is added (NOTIFY option is used internally by CA VM:Secure to indicate that the REJECT rule was added dynamically after an invalid logon attempt threshold was reached)

To file

LOGON

REJECT * LOGON (NOTIFY

User rules

LOGONBY

REJECT userid LOGONBY

OVERRIDE SYSRULES

LOGONBY

REJECT userid LOGONBY (NOTIFY

User rules

Password validation function

REJECT userid VALIDATE (NOTIFY

User rules