topic DataCenter Object Authentication Failing in Cloud Firewall

DataCenter Object Authentication Failing

AshleyM — Wed, 23 Sep 2020 12:30:11 GMT

Hi,

I am setting up a connection to an Azure datacenter via a datacenter object on the management server. I am using the Azure AD User Authentication method of connection & have had a service account set up with the permissions required as shown in the guide without MFA applied to it, however when I test the connection Smartconsole shows the connection as failing due to an "Authentication Problem".

I have checked the AAD sign-in logs for that user and can see successful logins from the management server, so I am a bit confused as to why CheckPoint is showing it as failing. Is there a log file on the management server that shows the Authentication process & where it is failing?

Any suggestions on what might be happening?

Thanks

Re: DataCenter Object Authentication Failing

G_W_Albrecht — Wed, 23 Sep 2020 12:37:48 GMT

Time ? sk154952: Authentication failure when creating an AWS datacenter object even though credentials are valid

Re: DataCenter Object Authentication Failing

Gil_Sudai — Wed, 23 Sep 2020 13:09:03 GMT

Which version are you using?

And in parallel, check $FWDIR/log/cloud_proxy.elg.

Re: DataCenter Object Authentication Failing

AshleyM — Fri, 25 Sep 2020 11:30:04 GMT

Thank you, after checking the cloud_proxy.elg log file I found the below:

"Failed querying Azure, No subscriptions attached to User/Service Principal"

After checking Azure it turned out the account had been given the required permissions but had not been assigned to any Subscriptions, now it has been assigned the relevant subscriptions the connection is working.

Thanks!