topic Identity Awareness (intergrate AD) Sign out in Firewall and Security Management

Identity Awareness (intergrate AD) Sign out

Hugo_Nobre — Thu, 04 Apr 2019 11:03:23 GMT

Hello everyone,

Is there any way to improve sign out on Identity Awareness (intergrate AD) ?

The problem is when entering a computer through RDP or another remote access program, the identity of those who enter is associated with the computer.

For RDP when sign out, few times do not remove the identity on the computer but with nother remote access program stay the identiy. I confirm with the command pdp m u [user].

Then only waiting for the User / IP association timeout ..

Thanks in advance for your help

Re: Identity Awareness (intergrate AD) Sign out

Vladimir — Thu, 04 Apr 2019 12:40:09 GMT

I think that you have to either use the IA Agent for Terminal Servers in order to track the user identity on multi user PCs accessed via RDP.

Alternatively, you may chose to select "Assume that only one user is connected per computer":

https😕/supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk105889

Re: Identity Awareness (intergrate AD) Sign out

PhoneBoy — Thu, 04 Apr 2019 23:18:52 GMT

Identity Collector and ADQuery do not get logoff events from Active Directory by design.
To get those, you need to use the Identity Agent.
For a terminal server in particular, it's highly recommended.