# Security Defenses

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FgDHOmtlOqWpyREbfdndf%2F18.png?alt=media&#x26;token=2c83e46a-83fd-4f86-960b-b3d258e0e20f" alt=""><figcaption></figcaption></figure>

In the Headers tab, within the Security Defenses section, you'll find the following settings.

#### **X-Frame-Options**&#x20;

It is an HTTP response header that allows administrators to control whether a page can be rendered within a frame, iframe, or any other object. It can have three values:

It can take 3 values -

* DENY

This header field instructs the browsers not to display the content in any frame

* SAMEORIGIN

This header field specifies that the content should not be displayed in any frame from a page with a different origin.

* ALLOW-FROM  (followed by a serialized-origin)

This header field specifies that the content should not be displayed in any frame from a page with a top-level browsing context of a different origin than the specified one.

By default, ZTrust only sets up a same-origin policy for iframes.

For more information, go to [X-Frame-Options](https://datatracker.ietf.org/doc/html/rfc7034#section-2)

#### **Content-Security-Policy**

This setting is employed to secure applications in multiple ways, reducing the risk of content injection vulnerabilities.&#x20;

It's the default value designed to prevent pages from being included by non-origin iframes.

Click on [Content-Security-Policy](https://www.w3.org/TR/CSP/) for more information.

#### **X-Content-Type-Options**&#x20;

This specifies the default value which prevents Internet Explorer and Google Chrome from MIME-sniffing a response away from the declared content-type

You can go to [X-Content-Type-Options](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options) for more information.

#### **X-Robots-Tag**

This configuration prevents pages from being indexed by search engines.

Click on [X-Robots-Tag](https://developers.google.com/search/docs/crawling-indexing/robots-meta-tag) for more information.

#### **X-XSS-Protection**

This header adjusts the Cross-site Scripting (XSS) filter within your browser. When using the default browser settings, the browser will halt page rendering upon detecting an XSS attack.

Click on [X-XSS-Protection](https://owasp.org/www-project-secure-headers/#xxxsp) for more information.

#### **HTTP Strict Transport Security (HSTS)**

This header instructs the browser to consistently utilize HTTPS.&#x20;

Upon encountering this header, the browser will exclusively access the site via HTTPS for the duration specified (up to 1 year), encompassing subdomains as well.

Click on [HTTP Strict Transport Security](https://owasp.org/www-project-secure-headers/#hsts) for more information.

#### **Referrer Policy**

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FdlhdpFM0TWQt195sMu3a%2F19.png?alt=media&#x26;token=695e53af-e30b-4da1-ab53-1461ffbcfa76" alt=""><figcaption></figcaption></figure>

The Referrer Policy HTTP header determines the amount of referrer information to include with requests, as specified by the Referer header.

Click on [Referrer Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy) for more information.

#### **Save**

After making any modifications, click on Save to apply those changes into the system.

#### **Revert**

If you prefer not to finalize your alterations, click on Revert.

This action will discard all changes made.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FYfUmH9SeAUSl72C830lu%2F20.png?alt=media&#x26;token=b3bea72c-8cc5-41ee-89bc-8b80fcdbdace" alt=""><figcaption></figcaption></figure>

In the Security Defenses section, located within the Brute force detection tab, you can customize the lockout settings according to your preferences.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2F8oqRzVM6e2afEaQ1pYxO%2F21.png?alt=media&#x26;token=6b50e6b9-6e61-49f2-8d64-021dfb616664" alt=""><figcaption></figcaption></figure>

Upon clicking Lockout permanently, you will be directed to the screen depicted below.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FqamF6SeGnvlqXUC1LMnO%2F22.png?alt=media&#x26;token=4dbd56a9-8661-4bc0-bf35-b14403c6292d" alt=""><figcaption></figcaption></figure>

#### **Max Login Failures**

This can be customized based on the organization standards.&#x20;

It means the maximum failed login attempts allowed before triggering a wait period.

#### **Quick Login Check Milliseconds**

It can be modified as required.

This duration dictates the interval between consecutive failures; if shorter than the specified duration, it will lock the user.

#### **Minimum Quick Login Wait**

This can be modified as required.

It represents the waiting period or the duration the user must wait after a rapid login failure.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FhzEgmMWaes3L7SZfW0sN%2F23.png?alt=media&#x26;token=9b61c03a-5b0f-4ac3-8e95-7af2530609f8" alt=""><figcaption></figcaption></figure>

You can choose from the dropdown the required duration unit that you want to specify out of Seconds, Minutes, Hours, and Days.

#### **Save**

After making any modifications, click on Save to apply those changes into the system.

#### **Revert**

If you prefer not to finalize your alterations, click on Revert.

This action will discard all changes made.

Upon clicking Lockout temporarily, you will be redirected to the screen shown below.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FhnRL5Ht3hYb8BEU9M1Dw%2F24.png?alt=media&#x26;token=437e7610-e90b-41a3-8671-08301f26b398" alt=""><figcaption></figcaption></figure>

#### **Max Login Failures**

This can be customized based on the organization standards.&#x20;

It means the maximum failed login attempts allowed before triggering a wait period.

#### **Wait Increment**

This can also be customized to align with organizational standards.

It refers to the duration an user must wait before attempting to log in again after reaching the maximum failed login attempts.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FaMbEirhSWF6d5Gmbv8Y4%2F25.png?alt=media&#x26;token=00259b54-66b8-46ee-98e4-56ca446d5f5e" alt=""><figcaption></figcaption></figure>

You can adjust the dropdown to select the desired time unit, such as Minutes, Seconds, Hours, or Days, as required.

#### **Max Wait**

This feature can be adjusted to align with your organization's standards.

It denotes the maximum duration for which a user will be locked out.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FcxYBp7jMJHxhMXivf3cz%2F26.png?alt=media&#x26;token=8fd25230-5d26-48ad-b572-1eca16b01393" alt=""><figcaption></figcaption></figure>

You can adjust the dropdown to select the desired time unit, such as Minutes, Seconds, Hours, or Days, as required.

#### **Failure Reset Time**

This can be adjusted as required.

It refers to the time after which the Failure count will be reset to Zero.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2F1nunxz8NTVkjzoOHE45z%2F27.png?alt=media&#x26;token=665cc871-a5d1-497f-b66e-55ca2f40c5b3" alt=""><figcaption></figcaption></figure>

You can choose from the dropdown the required duration unit that you want to specify out of Seconds, Minutes, Hours, and Days.

#### **Quick Login Check Milliseconds**

It can be modified as required.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FjitsCgHA5Lldmr2d9z0p%2F28.png?alt=media&#x26;token=064e8d78-12e6-4de7-8596-84556331a4b4" alt=""><figcaption></figcaption></figure>

This duration dictates the interval between consecutive failures; if shorter than the specified duration, it will lock the user.

#### **Minimum Quick Login Wait**

This can be modified as required.

It represents the waiting period or the duration the user must wait after a rapid login failure.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FYsSEqTIpqcPsH0dNeJ1o%2F29.png?alt=media&#x26;token=6f30e8c0-d284-40b2-b6ce-9a2cc6be3e20" alt=""><figcaption></figcaption></figure>

You can choose from the dropdown the required duration unit that you want to specify out of Seconds, Minutes, Hours, and Days.

#### **Save**

After any changes are made, click on Save in order to get those changes incorporated.

#### **Revert**

If you prefer not to finalize your alterations, click on Revert.

This action will discard all changes made.

Upon clicking Lockout permanently after temporary lockout, you will be redirected to the screen shown below.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2F1M93Mfn0nRjxe2y3aTX9%2F30.png?alt=media&#x26;token=b9854b77-86e5-45d8-bb5b-016ecb814b13" alt=""><figcaption></figcaption></figure>

#### **Max Login Failures**

This can be customized based on the organization standards.&#x20;

It means the maximum failed login attempts allowed before triggering a wait period.

#### **Maximum temporary lockouts**

This indicates the maximum number of temporary lockouts allowed before the user is permanently locked out. You can adjust this setting according to your needs.

#### **Wait Increment**

This can also be customized to align with organizational standards.

It refers to the duration an user must wait before attempting to log in again after reaching the maximum failed login attempts.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FgmYIw363yydWYZN7gCbx%2F31.png?alt=media&#x26;token=b1bce8e2-d916-4a2f-a2a0-6cb23e3c7509" alt=""><figcaption></figcaption></figure>

You can adjust the dropdown to select the desired time unit, such as Minutes, Seconds, Hours, or Days, as required.

#### **Max Wait**

This feature can be adjusted to align with your organization's standards.

It denotes the maximum duration for which a user will be locked out.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FOFy1X5GvAE70C9fiEuEl%2F32.png?alt=media&#x26;token=d8a5351b-3a8f-4774-bfa6-066ad99ea8e7" alt=""><figcaption></figcaption></figure>

You can adjust the dropdown to select the desired time unit, such as Minutes, Seconds, Hours, or Days, as required.

#### **Failure Reset Time**

This can be adjusted as required.

It refers to the time after which the Failure count will be reset to Zero.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FMWU8FL6GkXqRMIZoPIOa%2F33.png?alt=media&#x26;token=a3223c18-a8d0-4c2f-850c-f0fb1b6467c1" alt=""><figcaption></figcaption></figure>

You can choose from the dropdown the required duration unit that you want to specify out of Seconds, Minutes, Hours, and Days.

#### **Quick Login Check Milliseconds**

It can be modified as required.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FJSfM9ZSyZmv3DLWs7dKS%2F34.png?alt=media&#x26;token=988b00cd-9930-450e-ba9d-b38bc35e25b5" alt=""><figcaption></figcaption></figure>

This duration dictates the interval between consecutive failures; if shorter than the specified duration, it will lock the user.

#### **Minimum Quick Login Wait**

This can be modified as required.

It represents the waiting period or the duration the user must wait after a rapid login failure.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FDnnYejaf4OaZoTTouPd5%2F35.png?alt=media&#x26;token=bcb853bf-46f0-4e6e-9c67-6357b1093ba2" alt=""><figcaption></figcaption></figure>

You can choose from the dropdown the required duration unit that you want to specify out of Seconds, Minutes, Hours, and Days.

#### **Save**

After any changes are made, click on Save in order to get those changes incorporated.

#### **Revert**

If you prefer not to finalize your alterations, click on Revert.

This action will discard all changes made.



All attributes can be customized to suit specific requirements.

\
