Web Application Authentication Retry Limit

We have created a rule to access a web application thru the firewall by asking a firewall user name and password. When the user enters the correct user name and password the user is taken to the application page where the user enters application user name and password.

Now we want to create a rule where when user enters a wrong username or password for a specific  no of times  which we define as a rule the firewall user name should get locked for a specific period of time.

Pl advise if the same is possible.

Regards

Prashant