Device protection using configuration lockdown mode

An apparatus comprising:

• at least one processing device comprising a processor coupled to a memory;
• the at least one processing device being configured to implement the following steps:
• receiving a configuration command from a user to modify a configuration of at least a portion of a device;
• in response to receiving the configuration command, performing the following steps:
• determining whether the device is in a configuration lockdown mode that limits an execution of one or more configuration commands, wherein the received configuration command is distinct from a command to enable the configuration lockdown mode, wherein a duration of a disabling of the configuration lockdown mode is limited by one or more duration limits;
• executing the received configuration command in response to determining that the device is not in the configuration lockdown mode and that the one or more duration limits are not violated;
• and
• performing one or more automated actions and rejecting the received configuration command in response to determining that the device is in the configuration lockdown mode.

A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device to perform the following steps:

• receiving a configuration command from a user to modify a configuration of at least a portion of a device;
• in response to receiving the configuration command, performing the following steps:
• determining whether the device is in a configuration lockdown mode that limits an execution of one or more configuration commands, wherein the received configuration command is distinct from a command to enable the configuration lockdown mode, wherein a duration of a disabling of the configuration lockdown mode is limited by one or more duration limits;
• executing the received configuration command in response to determining that the device is not in the configuration lockdown mode and that the one or more duration limits are not violated;
• and
• performing one or more automated actions and rejecting the received configuration command in response to determining that the device is in the configuration lockdown mode.