Configuring Password Policy in Gaia Clish

[Ihenock1011]

Hi All,

We have Checkpoint SG and SMS appliances running R81.10, integrated with Cisco ISE for device administration using TACACS+. All authorized administrators use their Active Directory credentials. I'm examining the Gaia password policy under Global Properties -> User Accounts. There's a setting called "Expire Date." Since we use TACACS+, I'm unsure changing this setting will affects the current allowed administrators. Additionally, there are numerous settings like "Password Strength", "Password History"... under the Gaia CLI command "show password-controls..." . changing either of these settings impact our TACACS+ configuration?

Thanks

[AkosBakos · Accepted solution]

Hi @Ihenock1011 

According to the R81.20 admin guide (page 450)

Note - The password policy does not apply to non-local users that authentication
servers such as RADIUS manage their login information and passwords. In addition,
it does not apply to non-password authentication, such as the public key
authentication supported by SSH

BR

Akos