topic Re: Recon User for CyberArk Password Rotation in General Topics

Recon User for CyberArk Password Rotation

LostBoY — Wed, 29 May 2024 14:45:32 GMT

We have a Checkpoint Cluster deployed in AWS on R81.20
we are planning to integrate it with CyberArk i.e. administrator login via cyberark.

I wanted to know if Checkpoint supports recon user configuration with CyberArk i.e Automatic Password Rotation via CyberArk for user logins ?

is there any official documentation for this.

thanks

Re: Recon User for CyberArk Password Rotation

PhoneBoy — Wed, 29 May 2024 15:43:15 GMT

We don't have a specific integration with Cyberark that I'm aware of.
That doesn't mean it won't work, of course.

Re: Recon User for CyberArk Password Rotation

Norbert_Bohusch — Wed, 29 May 2024 20:59:35 GMT

There is an official supported integration by CyberArk which comes out-of-the-box which supports reconcile.

https://docs.cyberark.com/pam-self-hosted/Latest/en/Content/PASIMP/CheckPoint-GAiA-plugin.htm

Re: Recon User for CyberArk Password Rotation

LostBoY — Thu, 30 May 2024 09:25:19 GMT

Thanks..for this to work only cyberark users with admin privilidge are required ? or any specific configuration at Firewall end.

Re: Recon User for CyberArk Password Rotation

Norbert_Bohusch — Fri, 31 May 2024 05:57:35 GMT

In the environments I use it, we manage either built-in admin or other local accounts through CyberArk. For this no special configuration is needed.

To get into expert mode a bit more configuration is needed, with 2 options:

- Save expert password as separate account (unmanaged) and use Gaia account as logon account

- Set expert-authentication-mode to user-password and use a grouped dummy account as expert password (allows to use expert for different users)

Re: Recon User for CyberArk Password Rotation

LostBoY — Fri, 31 May 2024 06:04:06 GMT

Thank you for the reply...this also takes care of password rotation via cyberark I believe ?

Re: Recon User for CyberArk Password Rotation

Norbert_Bohusch — Fri, 31 May 2024 06:07:21 GMT

Sure

Re: Recon User for CyberArk Password Rotation

LostBoY — Fri, 31 May 2024 14:23:20 GMT

Thank you..i will test this out.