Firewall-1

[FW-1] Password rules for console/ssh admin login accounts

Subject: [FW-1] Password rules for console/ssh admin login accounts
From: Erik Widholm <ckptfw1 AT GMAIL DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 24 Nov 2004 19:31:57 -0600
For connections to management and FW1 servers (using SPLAT, FW1/VPN1
NG AI R55 HFA_09), what are the password policies?

1. is there a minimum length restriction?
2. is there a composition restriction (mixed case, let+num+spec_chars)?
3. is there a valid length of time restriction (3 mos, 1 year?)?
4. is there a no-repeat password restriction?
5. logging of failed attempts? where? how to audit?

where do I find this information?

Our auditor isn't letting up at all, and I couldn't find it in the FW
documentation.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>