Infinity CHECK POINT 1100 Administration Manual page 95

To edit the details of locally defined administrators:
1. Select the administrator from the table and click Edit.
2. Make the relevant changes.
3. Click Apply.
To delete a locally defined administrator:
1. Select an administrator from the list.
2. Click Delete.
3. Click Yes in the confirmation message.
Note - You cannot delete an administrator who is currently logged in.
To allow access for administrators defined in a remote RADIUS server:
1. Make sure administrators are defined in the remote RADIUS server.
2. Make sure a RADIUS server is defined on the appliance. If there is no server, click the RADIUS
configuration link at the top of this page. You must configure the IP address and shared secret
used by the RADIUS server.
Note - 1100 appliances only support IPv4 addresses. 1200R and 1400 appliances support both
IPv4 and IPv6 addresses.
3. When you have a configured RADIUS server, click edit permissions.
4. Click the Enable RADIUS authentication for administrators checkbox.
5. Select which user group defined in the RADIUS server has administrator permissions:
a) Select All users defined on RADIUS server (not recommended) or Specific RADIUS groups
only and enter the RADIUS groups separated by a comma.
b) Select the Administrators Role.
6. Click Apply.
To set the Session Timeout value for both local and remotely defined administrators:
1. Click Security Settings.
The Administrators Security Settings window opens.
2. Configure the session timeout (maximum time period of inactivity in minutes). The maximum
value is 999 minutes.
3. To limit login failure attempts, click the Limit administrators login failure attempts checkbox.
4. Enter the number of Maximum consecutive login attempts allowed before an administrator is
locked out.
5. In Lock period, enter the time (in seconds) that must pass before a locked out administrator
can attempt to log in again.
6. To enforce password complexity on administrators, click the checkbox and enter the number
of days for the password to expire.
7. Click Apply.
Note - This page is available from the Device and Users & Objects tabs.
Check Point 1100/1200R/1400 Appliances Centrally Managed Administration Guide R77.20.70
Appliance Configuration
| 95