Check Point L-71 - Page 85

Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 85
To edit the details of locally defined administrators:
1.
Select the administrator from the table and click Edit.
2.
Make the relevant changes.
3.
Click Apply.
To delete a locally defined administrator:
1.
Select an administrator from the list.
2.
Click Delete.
3.
Click Yes in the confirmation message.
Note - You cannot delete an administrator who is currently logged in.
To allow access for administrators defined in a remote RADIUS server:
1.
Make sure administrators are defined in the remote RADIUS server.
2.
Make sure a RADIUS server is defined on the appliance. If there is no server, click the RADIUS
configuration link at the top of this page. You must configure the IP address and shared secret
used by the RADIUS server.
3.
When you have a configured RADIUS server, click edit permissions.
The RADIUS Authentication window opens.
4.
Click the Enable RADIUS authentication for administrators checkbox.
Use roles defined on RADIUS server is selected by default.
5.
Configure the role for each user on the RADIUS server. See additional details below.
Note - A user without role definition will get a login error.
6.
If you select Use default role for RADIUS users, select the Administrators Role:
• Super Admin
• Read only
• Networking Admin
7.
To define groups, click Use specific RADIUS groups only and enter the RADIUS groups
separated by a comma.
8.
Click Apply.
To set the Session Timeout value for both local and remotely defined administrators:
1.
Click Security Settings.
The Administrators Security Settings window opens.
2.
Configure the session timeout (maximum time period of inactivity in minutes). The maximum
value is 999 minutes.
3.
To limit login failure attempts, click the Limit administrators login failure attempts checkbox.
4.
Enter the number of Maximum consecutive login attempts allowed before an administrator is
locked out.
5.
In Lock period, enter the time (in seconds) that must pass before a locked out administrator
can attempt to log in again.
6.
To enforce password complexity on administrators, click the checkbox and enter the number
of days for the password to expire.
7.
Click Apply.
Note - This page is available from the Device and Users & Objects tabs.