Configuring Local And Remote System Administrators - Infinity Check Point L-71WD Administration Manual

Configuring Local and Remote System Administrators

The Device > Administrators page lists the Check Point Appliance administrators and lets you:
• Create new local administrators
• Configure the session timeout
•
Limit login failure attempts
Administrators can also be defined in a remote RADIUS server and you can configure the
appliance to allow them access. Authentication of those remotely defined administrators is done
by the same RADIUS server.
Administrator Roles:
• Super Administrator - All permissions. Super Administrators can create new locally defined
administrators and change permissions for others.
• Read Only Administrator - Limited permissions. Read Only Administrators cannot update
appliance configuration but can change their own passwords or run a traffic monitoring report
from the Tools page.
Networking Administrator - Limited permissions. Networking Administrators can update or
•
modify operating system settings. They can select a service or network object but cannot
create or modify it.
Two administrators with write permissions cannot log in at the same time. If an administrator is
already logged in, a message shows. You can choose to log in with Read-Only permission or to
continue. If you continue the login process, the first administrator session ends automatically.
The correct Administrator Role must be configured to perform the operations listed below. If not,
a Permission Error message shows.
To create a local administrator:
1. Click New.
The Add Administrator page opens.
2. Configure the parameters (name, password, and password confirmation). The hyphen (-)
character is allowed in the administrator name. You cannot use these characters when you
enter a password or shared secret: { } [ ] ` ~ | ' " # + \
3. Select the Administrator Role.
4. Click Apply.
The name and Administrator Role is added to the table. When logged in to the WebUI, the
administrator name and role is shown at the top of the page.
To edit the details of locally defined administrators:
1. Select the administrator from the table and click Edit.
2. Make the relevant changes.
3. Click Apply.
Check Point 1100/1200R/1400 Appliances Centrally Managed Administration Guide R77.20.75
Appliance Configuration
| 82