iDRAC9 Security Configuration Guide

IP Blocking

You can use IP blocking to dynamically determine when excessive login failures occur from an IP address and block or prevent the IP address from logging into the iDRAC9 for a preselected time span. IP blocking includes:

• The number of allowable login failures
• The timeframe in seconds when these failures must occur
• The amount of time, in seconds, when the IP address is prevented from establishing a session after the total allowable number of failures is exceeded

As consecutive login failures accumulate from a specific IP address, they are tracked by an internal counter. When the user logs in successfully, the failure history is cleared, and the internal counter is reset. These settings can be edited in the GUI, RACADM, and Redfish.

Enabling this feature is a recommended security best practice. By automatically detecting potential malicious actions being performed and preventing unauthorized access to iDRAC through brute force attacks, IP blocking hardens iDRAC network security resilience.