willow karma
When reputation threshold is passed, I can continue to enter credentials forever, and of course I can login if I enter correct credentials.
It will only give me the lockout prompt and deny stage if I close browser and reopen.
What I'm missing? This seems to defeat the purpose.
willow karma
I'm on 2025.8.4
willow karma
So, the reason is because deny stage comes before identification, once you reach identification deny stage stops evaluating again.
One solution is to change identification stage to "restart", but that will hide the red box message that the creds are invalid.
I suppose second solution is to add another deny stage after identification
In my case I have both pass and user in one stage, so it will allow the user to continue trying passwords, and only reach the second deny when a correct combo is entered.
I think we need to have a new Invalid response behavior. That returs the error message and then restarts?
@tropic minnow Sorry for the ping, I thought you might find this interesting as to why the ip reputation blocked screen only appeared on new sessions in your video.
tropic minnow
...can probably be tweaked with an expression policy that compares the user and or/ip against reputation then add another stage to display an error/denial