Configuring System Passwords in Gaia Portal

Important - On Scalable Platforms (Maestro and Chassis), you must connect to the Gaia PortalClosed Web interface for the Check Point Gaia operating system. of the applicable Security Group.

Best Practice - For security reasons, configure different passwords for the Expert mode and for GRUB.

Configuring the Expert mode password

Description

The Expert mode password protects the Expert shell against unapproved access.

The default GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. shell is called clish.

Gaia ClishClosed The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell). is a restrictive shell (role-based administration controls the number of commands available in the shell).

While the use of Gaia Clish is encouraged for security reasons, Gaia Clish does not give access to low level system functions.

For low-level configuration, use the more permissive Expert mode shell. In addition, see sk144112.

  • To enter the Expert shell, run in Gaia Clish: expert

  • To exit from the Expert shell and go back to Gaia Clish, run: exit

Note - If a command is supported in Gaia Clish, it is not supported to run the corresponding command in Expert mode.

For example, to work with interfaces, Gaia Clish provides the commands "show interface" and "set interface".

Therefore, it is not supported to run the ifconfig command in the Expert mode.

Note - There is no default password for the Expert mode. You must configure a password for the Expert mode before you can use it.

Procedure

Step

Instructions

1

With a web browser, connect to Gaia Portal at:

https://<IP address of Gaia Management Interface>

2

Click System Management > System Passwords.

3

In the section Change Expert Password, enter the required password.

The password must contain at least 6 characters.

4

Click Apply.

Configuring the GRUB password

Description

The GRUB password protects the GRUB menu and GRUB terminal.

Gaia asks for this password when you boot into the Maintenance Mode and revert Gaia snapshots.

Important:

  • You must configure a GRUB password before you boot into the Maintenance Mode or revert a Gaia snapshot.

  • If do not know your GRUB password, and Gaia does not boot into the Normal Mode, you must contact Check Point Support.

Procedure

Step

Instructions

1

With a web browser, connect to Gaia Portal at:

https://<IP address of Gaia Management Interface>

2

Click System Management > System Passwords.

3

In the section Change GRUB Password, enter the required password.

The password must contain at least 6 characters.

4

Click Apply.