System Groups

Introduction

You can define and configure groups with GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. as you can with equivalent Linux‑based systems.

This function is retained in Gaia for advanced applications and for retaining compatibility with Linux.

Use groups for these purposes:

  • Specify Linux file permissions.

  • Control who can log in through SSH.

For other functions that are related to groups, use the role‑based administration feature, described in Roles.

All users are assigned by default to the users group. You can edit a user's primary group ID (using Gaia ClishClosed The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell).) to be something other than the default. However, you can still add the user to the users group. The list of members of the users group includes only users, who are explicitly added to the group. The list of does not include users added by default.

Configuring System Groups in Gaia Portal

Note - You must connect to the Gaia PortalClosed Web interface for the Check Point Gaia operating system. of the applicable Security GroupClosed A logical group of Security Appliances that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Every Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected..

In the navigation tree, click User Management > System Groups.

Step

Instructions

1

In the navigation tree, click User Management > System Groups.

2

Click Add.

3

In the Group Name field, enter the applicable unique name - between 1 and 16 alphanumeric characters without spaces.

4

In the Group ID field, enter a unique Group ID number - between 101 and 65530:

  • Group ID range 0-100 and range 65531-65535 are reserved for system use.

  • Group ID 0 is reserved for users with root permissions.

  • Group ID 10 is reserved for the predefined Users groups.

If you specify a value in the reserved ranges, an error message is displayed.

5

Click OK.

Step

Instructions

1

In the navigation tree, click User Management > System Groups.

2

Select the System Group.

3

Click Edit.

4

In the Available Members list, select a user.

To select several users:

  1. Press and hold the CTRL key on the keyboard.

  2. Left-click the applicable users.

    The selected users become highlighted.

5

Click Add >.

The selected users move to the Members of Group list.

6

Click OK.

Step

Instructions

1

In the navigation tree, click User Management > System Groups.

2

Select the System Group.

3

Click Edit.

4

In the Members of Group list, select a user.

To select several users:

  1. Press and hold the Ctrl key on the keyboard.

  2. Left-click the applicable users.

    The selected users become highlighted.

5

Click Add >.

The selected users move to the Available Members list.

6

Click OK.

Step

Instructions

1

In the navigation tree, click User Management > System Groups.

2

Select the System Group.

3

Click Delete.

4

Click OK to confirm.

Configuring System Groups in Gaia Clish

Note - You must run these commands in Gaia gClishClosed The name of the global command line shell in Check Point Gaia operating system for Security Appliances connected to Check Point Quantum Maestro Orchestrators. Commands you run in this shell apply to all Security Appliances in the Security Group. of the applicable Security Group.

Syntax

add group <Group Name> gid <Group ID>

add group <Group Name> member<SPACE><TAB>

add group <Group Name> member <UserName>

set group <Group Name> gid <Group ID>

show group <Group Name>

show groups

delete group <Group Name> member<SPACE><TAB>

delete group <Group Name> member <UserName>

delete group <Group Name>

Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently.

Parameters

Parameter

Description

group <Group Name>

Unique name of System Group - between 1 and 16 alphanumeric characters without spaces

gid <Group ID>

Unique Group ID number - between 101 and 65530:

  • Group ID range 0-100 and range 65531-65535 are reserved for system use.

  • Group ID 0 is reserved for users with root permissions.

  • Group ID 10 is reserved for the predefined Users groups.

If you specify a value in the reserved ranges, an error message is displayed.

member <UserName>

Name of an existing user.