Critics used to bang Check Point with the fact that anybody with physical
access to the SmartCenter server could do whatever they wanted to the
adminitrator users of the firewall and considered this a major
vulnerability, therefore starting from NGX, you create a single admin user
from the CLI (cpconfig) and all the rest of administrators and their
permissions are created in the Administrators section of the Users  tab on
the GUI.

So you are right.
Consider it a security improvement.

Regards

On 1/25/07, Crist Clark <[EMAIL PROTECTED]> wrote:

We need to change passwords of administrators defined using
the 'cpconfig' command line interface. In R55, when given
the choice, you ask to add a new administrator, but chose
the name of an existing one. You then can change the password
and other characteristics.

In R60, the only option given by cpconfig is to delete
administrators. Are they hinting to us that this method of
maintaining administrators is no longer supported? Do I
need to move all administrators into the GUI administration
to change passwords? Anyone have pointers to Check Point
docs about this?
--

Crist J. Clark                               [EMAIL PROTECTED]
Globalstar Communications                                (408) 933-4387


B¼information contained in this e-mail message is confidential, intended
only for the use of the individual or entity named above. If the reader of
this e-mail is not the intended recipient, or the employee or agent
responsible to deliver it to the intended recipient, you are hereby notified
that any review, dissemination, distribution or copying of this
communication is strictly prohibited. If you have received this e-mail in
error, please contact [EMAIL PROTECTED]

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================




--
Sergio Alvarez
(506)8301342

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to