Infinity CHECK POINT 1100 Administration Manual page 82

To create a Check Point Appliance local administrator:
1. Click New.
The Add Administrator page opens.
2. Configure the parameters (name, password, and password confirmation). The hyphen (-)
character is allowed in the administrator name. You cannot use these characters when you
enter a password or shared secret: { } [ ] ` ~ | ' " # + \
3. Select the Administrator Role
4. Click Apply.
The name and Administrator Role is added to the table. When logged in to the WebUI, the
administrator name and role is shown at the top of the page.
To edit the details of locally defined administrators:
1. Select the administrator from the table and click Edit.
2. Make the relevant changes.
3. Click Apply.
To delete a locally defined administrator:
1. Select an administrator from the list.
2. Click Delete.
3. Click Yes in the confirmation message.
Note - You cannot delete an administrator who is currently logged in.
To allow access for administrators defined in a remote RADIUS server:
1. Make sure administrators are defined in the remote RADIUS server.
2. Make sure a RADIUS server is defined on the appliance. If there is no server, click the RADIUS
configuration link at the top of this page. You must configure the IP address and shared secret
used by the RADIUS server.
Note - 1100 appliances only support IPv4 addresses. 1200R and 1400 appliances support both
IPv4 and IPv6 addresses.
3. When you have a configured RADIUS server, click edit permissions.
4. Click the Enable RADIUS authentication for administrators checkbox.
5. Select which user group defined in the RADIUS server has administrator permissions:
a) Select All users defined on RADIUS server (not recommended) or Specific RADIUS groups
only and enter the RADIUS groups separated by a comma.
b) Select the Administrators Role.
6. Click Apply.
To set the Session Timeout value for both local and remotely defined administrators:
1. Click Security Settings.
The Administrators Security Settings window opens.
2. Configure the session timeout (maximum time period of inactivity in minutes). The maximum
value is 999 minutes.
3. To limit login failure attempts, click the Limit administrators login failure attempts checkbox.
Check Point 1100/1200R/1400 Appliances Centrally Managed Administration Guide R77.20.70
Appliance Configuration
| 82