Configuring Password Policy in Gaia Clish

Ihenock1011 — Sat, 31 Aug 2024 07:45:28 GMT

Hi All,

We have Checkpoint SG and SMS appliances running R81.10, integrated with Cisco ISE for device administration using TACACS+. All authorized administrators use their Active Directory credentials. I'm examining the Gaia password policy under Global Properties -> User Accounts. There's a setting called "Expire Date." Since we use TACACS+, I'm unsure changing this setting will affects the current allowed administrators. Additionally, there are numerous settings like "Password Strength", "Password History"... under the Gaia CLI command "show password-controls..." . changing either of these settings impact our TACACS+ configuration?

Thanks

Re: Configuring Password Policy in Gaia Clish

AkosBakos — Sat, 31 Aug 2024 08:12:14 GMT

Hi @Ihenock1011

According to the R81.20 admin guide (page 450)

Note - The password policy does not apply to non-local users that authentication
servers such as RADIUS manage their login information and passwords. In addition,
it does not apply to non-password authentication, such as the public key
authentication supported by SSH

Akos

topic Configuring Password Policy in Gaia Clish in General Topics

Configuring Password Policy in Gaia Clish

Re: Configuring Password Policy in Gaia Clish