Clarification on Login Access and Password Reset After Expiration in Gaia Portal

[Saranya_0305]

I have only One user as "admin"

I have configured a Password policy in Gaia Portal with the following parameters.

Password Length:14
Disallow Palindrome : Enabled
Require 3 character types
Histort length :10
Password Expires after :90 days
lock out user after password expirataion : 30 days
Warn Users before :7 days
Deny Access to unused accounts :enabled
Days of non-use before lock-out :30 days
Deny access after failed login attempts: enabled
Block admin user: Disabled
Max number of failed attempts: 5
Allow accessafter this time :300 seconds

I have one doubt like, if I unfortunately didn't notice the password expiration.

Then after 120 days am I able to login to Gaia and CLI or can I have option to change the password?

[G_W_Albrecht]

As long as this only concerns a GW or Secondary SMS, you can reset the admin password as shown here: https://support.checkpoint.com/results/sk/sk106490

For primary SMS i would suggest a special rescue admin: Define a very good admin password with very long validity and do not give it away to anybody, store it safely. If admin expires, you can use that account to define admin PW again (and delete and redefine rescue admin if you want).

[Lesley]

Would recommend to make test account and play with that one. Just change the days a bit lower like 2 -3 days if possible. 

[the_rock]

Its pretty much what you mentioned, but yes, it would depend if you want to lock the user or not. By default, it would warn about password change 7 days before.

Andy

[PhoneBoy]

According to the above settings:

• User will be force to change the password after 90 days
• If the user does not log in after 120 days ("expires" plus "lock out"), then the account will be locked (thus unable to log in)