You can access the advanced settings for Vulnerability Manager by clicking on Scan Settings at the top of its report. The settings will be changed for that asset only. 
Password Brute-Force Testing
You can adjust how thoroughly Vulnerability Manager tests for weak or easily guessable passwords. By default, it is set to Minimal.
Tip: If your system enforces login lockout policies after several failed attempts, we recommend keeping brute-force testing set to disabled or minimal to prevent accidental lockouts.
| Option | Description |
| No brute force testing | If you have a lockout policy preventing users from accessing the system after a number of failed attempts, this feature is not recommended. |
| Minimal | Accesses the user database (if possible) to check non-blank passwords for usernames; otherwise checks only Administrator and Guest accounts. |
| Limited | Includes Minimal checks and ensures username and password are not identical. |
| Standard | Accesses the user database to apply password generation schemes and the previous checks; if inaccessible, performs Limited checks on Administrator and Guest. |
| Exhaustive | Extends Standard with additional dynamic password checks based on response speed; increases scan time. |
Tip: Start with Minimal or No Brute Force Testing to avoid triggering account lockouts. You can increase the level later if required for deeper password validation.