topic Re: Protection Against Brute-Force Attacks in Dynatrace: Login Attempt Limits in Dynatrace Managed Q&A

Protection Against Brute-Force Attacks in Dynatrace: Login Attempt Limits

Beshir — Mon, 13 Jan 2025 07:39:33 GMT

Does Dynatrace protect against brute-force attacks by restricting the maximum number of login attempts allowed for an account?

Re: Protection Against Brute-Force Attacks in Dynatrace: Login Attempt Limits

AntonPineiro — Mon, 13 Jan 2025 07:43:27 GMT

Hi,

Have you check Runtime Application Protection?

Best regards

Re: Protection Against Brute-Force Attacks in Dynatrace: Login Attempt Limits

Beshir — Mon, 10 Feb 2025 10:05:44 GMT

Thank you @AntonPineiro for your response and the provided link. However, my inquiry is specifically about the Dynatrace portal login security rather than application runtime security.

Could you please confirm whether Dynatrace has built-in protection against brute-force attacks for the Dynatrace account login, such as limiting the maximum number of failed login attempts before locking an account ?

I appreciate your clarification on this

Re: Protection Against Brute-Force Attacks in Dynatrace: Login Attempt Limits

AntonPineiro — Mon, 10 Feb 2025 12:13:46 GMT

Hi,

Not sure if that is documented. I would raise a support ticket about it.

Best regards

Re: Protection Against Brute-Force Attacks in Dynatrace: Login Attempt Limits

AntonioSousa — Mon, 10 Feb 2025 19:24:35 GMT

@Beshir,

Normally, that type of information is not publicly disclosed, as it gives information to the attacker. I have never seen any reference to it in Dynatrace documents and information. As @AntonPineiro said, a ticket might be the best way to get this information, if you really need it.

In the meantime, regarding passwords, there is some info here:
https://docs.dynatrace.com/docs/manage/identity-access-management/user-and-group-management/access-user-management