https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-failsafe/m-p/69475#M11992 <P>Hi,</P><P>We're deploying new gateways heavily reliant on IA and we've had a few IA problems, most of which are resolved now fortunately, however, we're looking at a failsafe should IA not work again.</P><P>Does anyone on here have any recommendations?&nbsp; Captive Portal is one option, but that will only work for HTTP/s applications (unless I'm mistaken).&nbsp; What happens if IA fails and users need to access applications using SSH or any other non HTTP/s protocol?</P><P>Thanks</P><P>Alex</P> Thu, 05 Dec 2019 17:50:37 GMT Alex_Sykes 2019-12-05T17:50:37Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-failsafe/m-p/69475#M11992 <P>Hi,</P><P>We're deploying new gateways heavily reliant on IA and we've had a few IA problems, most of which are resolved now fortunately, however, we're looking at a failsafe should IA not work again.</P><P>Does anyone on here have any recommendations?&nbsp; Captive Portal is one option, but that will only work for HTTP/s applications (unless I'm mistaken).&nbsp; What happens if IA fails and users need to access applications using SSH or any other non HTTP/s protocol?</P><P>Thanks</P><P>Alex</P> Thu, 05 Dec 2019 17:50:37 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-failsafe/m-p/69475#M11992 Alex_Sykes 2019-12-05T17:50:37Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-failsafe/m-p/69571#M11993 Captive Portal only works for HTTP(S) connections.<BR />Presumably users could authenticate themselves using this mechanism prior to using SSH or other protocols.<BR />Users could also theoretically authenticate to some other server using RADIUS then set up RADIUS Accounting so that information is imported via Identity Awareness. Fri, 06 Dec 2019 22:32:44 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-failsafe/m-p/69571#M11993 PhoneBoy 2019-12-06T22:32:44Z