Checkpoint TACACS+ local account fallback

ihenock101 — Thu, 21 Jul 2022 07:08:00 GMT

Hi All

I already deployed CISCO ISE and configure TACACS+ for checkpoint device administration and I use this command

"add aaa tacacs-servers priority <Priority> server <IPv4 Address of TACACS+ Server> key <Shared Secret> timeout <1-60>"

However if the checkpoint unable to access the radius server I want to fall back to the local account but I didn't get the command to do so please any help??

Re: Checkpoint TACACS+ local account fallback

PhoneBoy — Thu, 27 Nov 2025 12:54:20 GMT

Actually, local users should always be permitted to log in unless you've done something to change it, e.g. sk105320 (does not exist anymore)
That is, unless you're using a version prior to R80.10: sk111572

topic Checkpoint TACACS+ local account fallback in Firewall and Security Management

Checkpoint TACACS+ local account fallback

Re: Checkpoint TACACS+ local account fallback