topic Re: VSX password policy in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102092#M8549 <P>When I login to the VSX the CLI doens't looks like a Gaia like other Gateway but more like a Linux based command. Is it I'm entering different mode?&nbsp;</P> Mon, 16 Nov 2020 02:53:03 GMT 4d10s 2020-11-16T02:53:03Z VSX password policy https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102089#M8546 <P>I understand that VSX is running Redhat linux and I tried to check the local account password-policy using:</P><P>#ipa pwpolicy-show&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; // no such command</P><P>&nbsp;</P><P>Since Checkpoint gateway does password policy, so I would expect the same thing on VSX but I can't find it. What's the correct command to check this feature?</P> Mon, 16 Nov 2020 02:15:39 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102089#M8546 4d10s 2020-11-16T02:15:39Z Re: VSX password policy https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102090#M8547 <P>Check Point gateways run Gaia OS, which is based on RHEL, but is not exactly RHEL.<BR />User accounts and passwords are managed through Gaia OS specific commands via clish.</P> <P>See:&nbsp;<A href="https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/Password-Policy-Gaia-Clish.htm?tocpath=User%20Management%7CPassword%20Policy%7C_____2" target="_blank">https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/Password-Policy-Gaia-Clish.htm?tocpath=User%20Management%7CPassword%20Policy%7C_____2</A></P> Mon, 16 Nov 2020 02:22:10 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102090#M8547 PhoneBoy 2020-11-16T02:22:10Z Re: VSX password policy https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102091#M8548 <P>For Gaia OS I can check from GUI and cli. But I mean for VSX, when I cli in its running in Linux based so those command wont work. there must be .conf file for the password-policy I can check.</P> Mon, 16 Nov 2020 02:33:30 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102091#M8548 4d10s 2020-11-16T02:33:30Z Re: VSX password policy https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102092#M8549 <P>When I login to the VSX the CLI doens't looks like a Gaia like other Gateway but more like a Linux based command. Is it I'm entering different mode?&nbsp;</P> Mon, 16 Nov 2020 02:53:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102092#M8549 4d10s 2020-11-16T02:53:03Z Re: VSX password policy https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102096#M8550 <P>Like any Linux, you can configure users to use specific login shells.<BR />The default shell for users in Gaia OS is clish, but it can also be configured to bash (i.e. expert mode).<BR />This is not specific to VSX.</P> <P>The only supported method for accessing and changing OS-specific settings on a VSX gateway is via clish as WebUI is generally not available.<BR />If you are not in clish when you log in, type "clish" after you log in.<BR />Then you can access/change OS-specific settings.<BR /><BR /></P> Mon, 16 Nov 2020 04:21:34 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102096#M8550 PhoneBoy 2020-11-16T04:21:34Z Re: VSX password policy https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102104#M8551 <P>ok, so I guess the default shell is bash when I login. If I type "clish", the next time I login will be bash right?</P> Mon, 16 Nov 2020 05:21:49 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102104#M8551 4d10s 2020-11-16T05:21:49Z Re: VSX password policy https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102105#M8552 <P>So, the default shell when I login is bash, if I type "clish" and next time I login will be bash or clish?</P> Mon, 16 Nov 2020 05:22:57 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-password-policy/m-p/102105#M8552 4d10s 2020-11-16T05:22:57Z