topic Re: Can we configure CloudGuard Controller on multi domain server? in Cloud Firewall

Can we configure CloudGuard Controller on multi domain server?

sachintekane — Wed, 26 Apr 2023 09:07:43 GMT

We are planning to use User Access role using Azure AD in MDS but getting error while importing the users. We just want to know weather Cloud Guard Controller is supported or not on MDS(Multi Domain Server R81 JHF 77)

Re: Can we configure CloudGuard Controller on multi domain server?

Chris_Atkinson — Wed, 26 Apr 2023 10:17:14 GMT

Have you discussed sk175983 with TAC already?

Re: Can we configure CloudGuard Controller on multi domain server?

sachintekane — Wed, 26 Apr 2023 10:28:02 GMT

Thanks for sharing the SK,

I will contact TAC. But SK doesn't have info if cloudguard controller is supported or not on MDS.

Re: Can we configure CloudGuard Controller on multi domain server?

Chris_Atkinson — Wed, 26 Apr 2023 11:27:08 GMT

Yes supported. What's the specific concern relating to that?

(Earliest reference I could find is in sk115772).

Re: Can we configure CloudGuard Controller on multi domain server?

sachintekane — Wed, 26 Apr 2023 11:36:21 GMT

It was giving me error when i run "cloudguard on" command from specific CMA. PFA error.

Re: Can we configure CloudGuard Controller on multi domain server?

Chris_Atkinson — Wed, 26 Apr 2023 12:09:35 GMT

The workflow changed in recent versions, I know on regular SMS it's now activated automatically in R81 when you configure a new DC object.

Will check the error and revert.

Re: Can we configure CloudGuard Controller on multi domain server?

Gil_Sudai — Wed, 26 Apr 2023 17:43:02 GMT

Yes it is supported. What is currently not supported (and will be supported in the next main version after R81.20) is the usage of Data Center objects in the MDS Global policy.

Re: Can we configure CloudGuard Controller on multi domain server?

sachintekane — Sat, 29 Apr 2023 12:59:20 GMT

Currently MDS running on R81 version and i want to use Azure AD user group in one of the CMA. Do we have any document where i can refer and enable cloudguard controller on MDS level?

Re: Can we configure CloudGuard Controller on multi domain server?

Gil_Sudai — Sun, 30 Apr 2023 21:01:59 GMT

You do not need to manually enable anything. Just create a Data Center and start using it. The backend process will start automatically.

Re: Can we configure CloudGuard Controller on multi domain server?

sachintekane — Thu, 04 May 2023 17:55:51 GMT

TAC helped to fix this issue by replacing directory.py file on MDS and able to see Azure AD users and groups.

Now we are facing challenge to authenticate users using SAML app for mobile access. Getting error with Failed Log In - Unknown user. We could see login successful in Azure SAML sign-in log. Not sure why Security gateway not authenticating Azure AD users.

Anyone faced similar issue.

Re: Can we configure CloudGuard Controller on multi domain server?

PhoneBoy — Thu, 04 May 2023 19:31:48 GMT

Recommend creating a separate thread for this issue in the Remote Access space.

Re: Can we configure CloudGuard Controller on multi domain server?

Chris_Atkinson — Fri, 05 May 2023 01:13:21 GMT

Which specific remote access client are you using or is it the MAB portal?

(e.g. Capsule VPN solution doesn't currently support SAML auth - please speak with your local CP SE about an RFE where needed.)