Root use

[clath13]

We are getting ready to deploy a PAM solution and were wondering if root actually does anything on a web gateway.  Does it run any processes, jobs, etc. that would be disrupted if we scheduled a password change?

[fw_mon]

Hello @clath13 

while most mwg processes are running as a restricted mwg/mwgc user, some processes are running as a root user, for example mwg-trap and mwg-monitor. By default there isn't any process that require a root password to run. 

Maybe somebody from SkyHigh can confirm if WG still supported when PAM (like a CyberArk or similar) is used.

[AaronT · Accepted solution]

@clath13 We rotate our root and admin passwords with some frequency and haven't noticed anything breaking on the SWGs as of yet.  We do it using automation leveraging a PAM solution.  It works great for us and saves us the time of having to change them manually.