Should be between 3 and 10.
Maximum number of minutes the IP address will be locked out for after failing the allowed login attempts. This should be between 0 and 1440.
Should be between 0 (no timeout) and 1440 minutes.