When login into the controller with a wrong username/password combination, you will be prompted with an error.
There are 2 different scenarios depending on the system software version.
Before sw2.0.1.r87
There are no limits in the number of login attempts in software versions below sw2.0.1.r87. This means, that a brute force attack is possible. It is highly recommended to update any system running on any software version below sw2.0.1.r87!
From and above sw2.0.1.r87
From version 2.0.2.r87 the number of login attempts is limited to 5. Each failed attempt will generate a notification below the login form.
(Click on the image to enlarge)
The system will disable login for 900sec (15min). Power cycling the controller will reset this timer.