service account locks out multiple times a day on our checkpoint gtwys

[kb1]

So we have mobile access enabled on 2 of our gateways , one is an open server and the other one is a 4000 series appliance and we get lockouts from both of these gateways, the service account is svc_checkpoint and its configured under ldap server properties. The lockouts are a lot and we got about 1300 or so in the past 30 days for the both of these gateways, no idea whats causing them and last time we tried changing passwords for this account it brought down production traffic so im not attempting that again, anything else that can be done to prevent these lockouts?

Attaching pic below of where the service account is configured.

Thanks and Regards.

[PhoneBoy]

You might have to get the TAC involved here to help debug this.
However, given this is clearly a pre-R80 system, if they find its a bug, you will be asked to upgrade as releases prior to R80.10 are no longer supported.

[kb1]

Wait wait, actually both are R80.20 and there is a hotfix available for both dated 20th Feb don't know if that will fix the issue though.

[PhoneBoy]

Ah yes, this is a Mobile Access policy, which still uses the old SmartDashboard.
You should confirm with TAC if this issue is addressed in the JHF.

[Buitre]

hello, i have the same problem on R81 take 69,

Do you know if is a certified bug already solved ?

thanks

[PhoneBoy]

No idea, and would recommend consulting with the TAC: https://help.checkpoint.com

[Buitre]

found solution for my issue : it was ntlm protocol sent by firewall to AD.

Solution is here :

https://support.checkpoint.com/results/sk/sk91462