Table Of Contents

Specifying Password, Logon, and Lockout Policies

Specifying Password, Logon, and Lockout Policies by Using Authentication Rules

Creating and Modifying Authentication Rules, and Assigning Rules to Users

Specifying Password, Logon, and Lockout Policies

---

In Cisco Unity Connection, you use authentication rules to determine the password and account lockout policies for phone and web-tool access, and the logon policy for web-tool access for all users who access Cisco Unity Connection voice messages.

See the following sections:

•Specifying Password, Logon, and Lockout Policies by Using Authentication Rules

•Creating and Modifying Authentication Rules, and Assigning Rules to Users

Specifying Password, Logon, and Lockout Policies by Using Authentication Rules

In Cisco Unity Connection, authentication rules govern user passwords and account lockouts for all user accounts. You use authentication rules to secure how users access Connection by phone, and how users access Cisco Unity Connection Administration and the Cisco Personal Communications Assistant (PCA).

For example, an authentication rule determines:

•The number of failed logon attempts that are allowed before an account is locked

•The number of minutes an account remains locked before it is reset

•Whether a locked account must be unlocked manually by an administrator

•The minimum length allowed for passwords

•The number of days before a password expires

Creating and Modifying Authentication Rules, and Assigning Rules to Users

Authentication rules are specified on the System Settings > Authentication Rules page in Connection Administration. Connection includes the following predefined authentication rules:

Recommended Voice Mail Authentication Rule	By default, Connection applies this rule to the Voice Mail password on the Password Settings page of each user account and user template for which you set up user access to Connection by phone.
Recommended Web Application Authentication Rule	By default, Connection applies this rule to the Web Application password on the Password Settings page of each user account and user template for which you set up user access to Cisco Unity Connection Administration, or to the Cisco Personal Communications Assistant.

You can change these defaults, and can create an unlimited number of additional authentication rules.