Potential for abuse of the password reset link with https://cc2.catonetworks.com/forgotAdminPassword

Question

Hi, This is Cato Lab from South Korea.Our customer raised a question.Is there any way to prevent malicious actors from repeatedly entering an email address to trigger password reset emails, potentially spamming or annoying administrators?Their concern is that someone could misuse the reset link mechanism to repeatedly send reset emails, causing inconvenience to the administrators or account owners.Does Cato have any existing protections or recommended best practices to mitigate this type of abuse?It will be really helpful if you guys know any type of protection behavior for administrators regarding using this webpage.Thanks,Best Regards,Cato Lab.

michaelsaw · Answer

Hi Catolab,&nbsp;You may setup Login Restrictions and consider MFA/SSO for admin login: https://support.catonetworks.com/hc/en-us/articles/4413280532113-Authenticating-AdminsWould this be alright?
Cheers!

catolab · Answer

Thanks for the reply.I understand what you meant to prevent non-admin users entering CATO CMA page,however he was asking how to prevent people who are trying to reset someone's email through the link I provided.The customer seems worried that someone could maliciously try to renew the administrators' password many times.The customer was asking about preventive measures for users who repeatedly try to reset passwords or exhibit other malicious behavior.The customer stopped asking, so I think it's fine.Thanks for your answer.Best Regards,Catolab.

michaelsaw · Answer

Hi catolab,&nbsp;
You mentioned an interesting point.&nbsp;Perhaps it may be a consideration/idea to track details (such as time, date, source IP address...) when someone starts/triggers reset password in CMA.
Cheers