cp_mgmt_set_login_restrictions
Set login restrictions through native controller HTTPAPI with owned sessions
Collection: check_point.mgmt
Full Name: check_point.mgmt.cp_mgmt_set_login_restrictions
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Set login restrictions through native controller HTTPAPI with owned sessions
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| auto_publish_session | bool | false | Publish this owned session explicitly after the operation; default false. | |
| display_access_denied_message | bool | Indicates whether to display informative message upon denying access. Required only when lockout-admin-account is set to true. | ||
| failed_authentication_attempts | int | Number of failed authentication attempts before lockout administrator account. Required only when lockout-admin-account is set to true. Valid values are between 1 and 120. | ||
| lockout_admin_account | bool | Indicates whether to lockout administrator’s account after specified number of failed authentication attempts. | ||
| lockout_duration | int | Number of minutes of administrator account lockout. Required only when lockout-admin-account is set to true. Valid values are between 1 and 120. | ||
| unlock_admin_account | bool | Indicates whether to unlock administrator account after specified number of minutes. Required only when lockout-admin-account is set to true. | ||
| version | str | Management API version path; omitted uses the default API version. | ||
| wait_for_task | bool | true | Wait for returned asynchronous task identifiers; default true. | |
| wait_for_task_timeout | int | 30 | Polling deadline in minutes; default 30, negative values use 30, maximum 1440. |
Example
yaml
- name: set-login-restrictions
check_point.mgmt.cp_mgmt_set_login_restrictions:
display_access_denied_message: false
failed_authentication_attempts: 10
lockout_admin_account: true
lockout_duration: 30
unlock_admin_account: false