topic Re: service account locks out multiple times a day on our checkpoint gtwys in General Topics

service account locks out multiple times a day on our checkpoint gtwys

kb1 — Thu, 26 Mar 2020 17:29:41 GMT

So we have mobile access enabled on 2 of our gateways , one is an open server and the other one is a 4000 series appliance and we get lockouts from both of these gateways, the service account is svc_checkpoint and its configured under ldap server properties. The lockouts are a lot and we got about 1300 or so in the past 30 days for the both of these gateways, no idea whats causing them and last time we tried changing passwords for this account it brought down production traffic so im not attempting that again, anything else that can be done to prevent these lockouts?

Attaching pic below of where the service account is configured.

Thanks and Regards.

Re: service account locks out multiple times a day on our checkpoint gtwys

PhoneBoy — Fri, 27 Mar 2020 04:00:49 GMT

You might have to get the TAC involved here to help debug this.
However, given this is clearly a pre-R80 system, if they find its a bug, you will be asked to upgrade as releases prior to R80.10 are no longer supported.

Re: service account locks out multiple times a day on our checkpoint gtwys

kb1 — Fri, 27 Mar 2020 17:35:19 GMT

Wait wait, actually both are R80.20 and there is a hotfix available for both dated 20th Feb don't know if that will fix the issue though.

Re: service account locks out multiple times a day on our checkpoint gtwys

PhoneBoy — Sat, 28 Mar 2020 00:00:00 GMT

Ah yes, this is a Mobile Access policy, which still uses the old SmartDashboard.
You should confirm with TAC if this issue is addressed in the JHF.

Re: service account locks out multiple times a day on our checkpoint gtwys

Buitre — Fri, 25 Aug 2023 10:45:57 GMT

hello, i have the same problem on R81 take 69,

Do you know if is a certified bug already solved ?

thanks

Re: service account locks out multiple times a day on our checkpoint gtwys

PhoneBoy — Fri, 25 Aug 2023 13:40:27 GMT

No idea, and would recommend consulting with the TAC: https://help.checkpoint.com

Re: service account locks out multiple times a day on our checkpoint gtwys

Buitre — Fri, 25 Aug 2023 14:21:41 GMT

found solution for my issue : it was ntlm protocol sent by firewall to AD.

Solution is here :

https://support.checkpoint.com/results/sk/sk91462