Best way to deny access to webgui after some failed logins

[jlopezo]

I am using pfsense 2.6 on a Proxmox VM

I need some configuration that enables access denial after 3 failed logins from a user trying to login thru WAN.

Which is the best way to do it?

Thanks!

[cmb]

That's done by default after 15 failed login attempts. That's not configurable.

Still, you shouldn't leave the GUI (or any management interface of any sort on any device) open WAN-side, that's asking for trouble.