Firewall-1

[FW-1] disable Provider-1 account after four or five unsuccessful login

Subject: [FW-1] disable Provider-1 account after four or five unsuccessful login attempts?
From: cisco4ng <cisco4ng AT YAHOO DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 20 Mar 2006 11:11:41 -0800
Hi Gurus,
   
  Aside from using External authentication (RSA SecurID, Radius,etc...),
is it possible to implement disabling Provider-1/CMAs login access
after, for example, five unsuccessfully login attempt, using
Provider-1 internal password authentication.  For example, if a user
log into Provider-1/CMAs with his/her Provider-1 internal username/password,
if a user has five consecutive unsucessfully login, the account get disabled
and the Provider-1 Super User (me) will have to reset his/her account.
   
  With RSA SecurID, Radius and MS Active Directory, the acount logout
function is handle by that application, not provider-1.  Can it be done
with Provider-1 internal users as well?  By the way, I am using Provider-1
NGx R60 with HFA02
   
  I am thinking of making the Provider-1 MLM/CLM may be SmartPortal available
over the Internet so that customer can log in and see the security/log in real 
time but I 
  want to reduce the risk of being hacked so that the account will be disabled 
after
let say four or five different unsuccessfully login attempts.
   
  Is this possible with Provider-1 NGx internal account?  
   
  As always, TIA
   
  cisco4ng

                
---------------------------------
Yahoo! Mail
Bring photos to life! New PhotoMail  makes sharing a breeze. 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>