Security on log on

Ok, I was presenting this to some execs and a question came up on what is stopping someone from brute force attempts into the opmanager login webpage? Is there some security settings which stops a login after a few failed attempts?