Provider-1/SiteManager-1 - Check Point

Administrators(administrators) with different access rights. It enables trusted communication bothwithin the Provider-1/SiteManager-1 network, and with customers’ networkenvironments.AdministratorsIt is important, for security purposes, that there be different types of administrativeauthority. Administrators with authority over the entire system are needed in order tomanage the entire Provider-1/SiteManager-1 system. But there also must be a level ofadministration authority which only applies to the customer environment and not tothe Provider-1/SiteManager-1 system.It is not appropriate for an administrator who remotely manages a VPN-1 Pro gatewayin a particular customer network, to be able to have authority over the entireProvider-1 system. This could be a serious security breach, as a customer’s internal staffwould have access to other customer networks. For an MSP which handles numerouscustomers, it would not be appropriate for a particular customer administrator who isnot familiar with the entire system to, say, have the authority to shut down an MDSManager and delete all the superusers from the system.In the Provider-1/SiteManager-1 environment, four types of administrators have beendesignated to handle different levels of responsibility. While there needs to beadministrators who have the authority to create and manage the entireProvider-1/SiteManager-1 environment, not every administrator in the system has thislevel of complete control.Chapter 1 Introduction 27