diff --git a/config/filter.d/centreon.conf b/config/filter.d/centreon.conf
index 68460363..fd3c8482 100644
--- a/config/filter.d/centreon.conf
+++ b/config/filter.d/centreon.conf
@@ -6,4 +6,4 @@
 datepattern = ^%%Y-%%m-%%d %%H:%%M:%%S
 
 [Definition]
-failregex = ^\[0-9-]*\|[0-9-]*\|\[0-9-]*|\[[^]]*\] \[<HOST>\] Authentication failed for '.+' :
+failregex = ^(?:\|-?\d+){3}\|\[[^\]]*\] \[<HOST>\] Authentication failed for '<F-USER>[^']+</F-USER>'
diff --git a/config/jail.conf b/config/jail.conf
index 71535411..8027f4d0 100644
--- a/config/jail.conf
+++ b/config/jail.conf
@@ -821,6 +821,7 @@ action  = %(banaction)s[name=%(__name__)s-tcp, port="%(tcpport)s", protocol="tcp
            %(banaction)s[name=%(__name__)s-udp, port="%(udpport)s", protocol="udp", chain="%(chain)s", actname=%(banaction)s-udp]
 
 [centreon]
+port    = http,https
 logpath = /var/log/centreon/login.log
 
 # consider low maxretry and a long bantime