Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Note that you can externally create and authenticate External Database users, in which case the appliance 
retrieves user credentials from an external repository, such as an LDAP directory server or RADIUS 
authentication server. You manage password settings for these users on the external server. For detailed 
information on external authentication, see the FireSIGHT System User Guide.

Any

After you create an External Database user, you must configure the Defense Center to allow access to 
the database on the appliance. You must also configure a database access list on the appliance and add 
all host IP addresses that will query the external database.

Admin

Use External 
Authentication Method

Select this option if you want this user’s credentials to be externally 
authenticated.

If you select this option for the user and the external authentication 
server is unavailable, that user can log into the web interface but 
cannot access any functionality.

Maximum Number of 
Failed Logins

Enter an integer, without spaces, that determines the maximum number of 
times each user can consecutively fail login attempts before the account is 
locked. The default setting is five tries; use 

0

 to allow an unlimited number 

of failed logins.

Minimum Password 
Length

Enter an integer, without spaces, that determines the minimum required 
length, in characters, of a user’s password. The default setting is 

8

. A value 

of 0 indicates that no minimum length is required.

Days Until Password 
Expiration

Enter the number of days after which the user’s password expires. The 
default setting is 

0

, which indicates that the password never expires.

Days Before Expiration 
Warning

Enter the number of warning days users have to change their password 
before their password actually expires. The default setting is 

0

 days.

The number of warning days must be less than the number of days 
before the password expires.

Force Password Reset 
on Login

Select this option to force users to change their passwords the first time they 
log in.

Check Password 
Strength

Select this option to require strong passwords. A strong password must be at 
least eight alphanumeric characters of mixed case and must include at least 
one numeric character and one special character. It cannot be a word that 
appears in a dictionary or include consecutive repeating characters.

Exempt from Browser 
Session Timeout

Select this option if you do not want a user’s login sessions to terminate due 
to inactivity. Users with the Administrator role cannot be made exempt.