Print Download Documentation Send Feedback

Previous

Next

Connected Administrators

What can I do here?

Use this window to see a list of administrators currently connected to the Security Management Server.

Getting Here

Getting Here - Click the upward facing arrow in the bottom right hand corner of SmartConsole.

Creating and Changing an Administrator Account

To successfully manage security for a large network, we recommend that you first set up your administrative team, and delegate tasks.

We recommend that you create administrator accounts in SmartConsole, with the procedure below or with the First Time Configuration Wizard.

If you create it through the SmartConsole, you can choose one of these authentication methods:

To create an administrator account using SmartConsole:

  1. Click Manage & Settings > Permissions and Administrators.

    The Administrators pane shows by default.

  2. Click New Administrator.

    The New Administrators window opens.

  3. Enter a unique name for the administrator account.

    Note - This parameter is case-sensitive.

  4. Set the Authentication Method, or create a certificate, or the two of them.

    Note - If you do not do this, the administrator will not be able to log in to SmartConsole.

    To define an Authentication Method:

    In the Authentication Method section, select a method and follow the instructions in Configuring Authentication Methods for Administrators.

    To create a Certificate - If you want to use a certificate to log in:

    In the Certificate Information section, click Create, and follow the instructions in Configuring Certificates for Administrators.

  5. Select a Permissions profile for this administrator, or create a new one.
  6. Set the account Expiration date:
    • For a permanent administrator - select Never
    • For a temporary administrator - select an Expire At date from the calendar

    The default expiration date shows, as defined in the Default Expiration Settings. After the expiration date, the account is no longer authorized to access network resources and applications.

  7. Optional: Configure Additional Info - Contact Details, Email and Phone Number of the administrator.
  8. Click OK.

To change an existing administrator account:

  1. Click Manage & Settings > Permissions and Administrators.
  2. Double-click an administrator account.

    The Administrators properties window opens.

Creating an administrator with cpconfig

We do not recommend creating an administrator with cpconfig, the Check Point Configuration Tool. Use it only if there is no access to SmartConsole or the Gaia Portal. If you use cpconfig to create an administrator:

Configuring Default Expiration for Administrators

If you want to use the same expiration settings for multiple accounts, you can set the default expiration for administrator accounts. You can also choose to show notifications about the approaching expiration date at the time when an administrator logs into SmartConsole or one of the SmartConsole clients. The remaining number of days, during which the account will be alive, shows in the status bar.

To configure the default expiration settings:

  1. Click Manage & Settings > Permissions and Administrators > Advanced.
  2. Click Advanced.
  3. In the Default Expiration Date section, select a setting:
    • Never expires
    • Expire at - Select the expiration date from the calendar control
    • Expire after - Enter the number of days, months, or years (from the day the account is made) before administrator accounts expire
  4. In the Expiration notifications section, select Show 'about to expire' indication in administrators view and select the number of days in advance to show the message about the approaching expiration date.
  5. Click Publish.