Protecting deployments from brute-force password attacks
You can protect deployments from brute-force password attacks
by locking out users after a specified number of failed log-in attempts. 
For detailed instructions, refer to the pdf/technote.pdf technote 7044431.