topic Re: About integration between my AD and checkpoint in Firewall and Security Management

About integration between my AD and checkpoint

hakanka — Thu, 16 Jan 2020 07:45:45 GMT

Hi,

I am newbie on checkpoint management. Please forgive me if I am wrong. I am managing 2* firewall on my city. I have an issue on one of them.

One of them has AD with windows server 2012, and there is no issue after changing firewall group on user firewall groups at AD. But, other firewall has AD with windows server 2008 and after I change firewall group of one user, the info is coming very delayed.(half hour, an hour or more-if location is MPLS-) so we can not react quickly when we need changes on fw groups.

What do you suggest to me ?

Thank you for incoming answer.

Re: About integration between my AD and checkpoint

PhoneBoy — Fri, 17 Jan 2020 11:59:31 GMT

Need more information about our configuration.
Starting with: gateway and management version with jumbo hotfix level.
Also which method of Identity Awareness you're using (ADQuery, Identity Agent, etc).

Re: About integration between my AD and checkpoint

Yatiraj_Panchal — Fri, 17 Jan 2020 12:06:52 GMT

Hi,

Is Connectivity fine between CheckPoint and AD server, please first make sure about the connectivity and latency between the both then check further troubleshoot.

Re: About integration between my AD and checkpoint

hakanka — Fri, 17 Jan 2020 13:03:32 GMT

management:Version: R80.20 OS: Gaia Kernel Version: 3.10
gateways:Version: R80.20 OS: Gaia Kernel Version: 2.6

also We use Identity Collector

Re: About integration between my AD and checkpoint

hakanka — Fri, 17 Jan 2020 13:04:03 GMT

there is no problem with connectivity.

Re: About integration between my AD and checkpoint

PhoneBoy — Mon, 20 Jan 2020 22:13:35 GMT

Recommend doing some of the steps here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk113747
If it's not clear from the commands what is happening, engage with the TAC.