topic Re: MUH2 in Firewall and Security Management

MUH2

Magnus-Holmberg — Thu, 23 Sep 2021 07:56:05 GMT

Hi,

Am trying to install som MUH2 clients on jumpgates.
The GW is using VSX on R80.30 HFA 236

I get an error saying

"An error was detected while trying to authenticate against the AD server.
It may be a problem of bad configuration or connectivity.
Please refer to the troubleshooting guide for more help"

So checked the installation guide again.

https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_IdentityAwareness_AdminGuide/html_frameset.htm

To configure Terminal Servers Identity Agents Authentication Settings with all Active Directories:

Log in to SmartConsole.
From the left navigation toolbar, click Gateways & Servers.
Open the Identity Awareness Gateway object.
In the left tree, go to the Identity Awareness page.
Near the Terminal Servers, click Settings.
In the Authentication Settings section, click Settings.
Select All Gateway's Active Directories (under Security Gateway -> Other - > User Directory).
Click OK to close the Active Directories window.
Click OK to close the Terminal Servers window.
Configure the Account Units Query settings:
1. In the left tree of the Security Gateway object, click on the [+] near the Other pane.
2. Click the User Directory pane.
3. In the Account Units Query section, select All.
Click OK to close the Gateway Properties window.
Install the Access Policy.

But i honestly dont see the account units query. is the guide incorrect and it should be "user Directories"

the agent itself says connected but the users loged in says not authenticated.

For other identitys we uses the identity collector. so there is ldap account units within the CMA

Regards,
Magnus

Re: MUH2

Alex- — Thu, 23 Sep 2021 11:22:57 GMT

I have a somewhat similar issue with the MuHv2 agent, R80.40 Take 118 VSX.

The agent shows connected and using pdp commands on the VS the VM's are seen, but it doesn't show any authenticated user.

I have an SR open. Some things that were tried was making sure the agent was installed with admin rights and disable secure boot on the image but it didn't help.

Re: MUH2

mcatanzaro — Thu, 23 Sep 2021 12:19:24 GMT

Greetings Magnus,

What OS are the servers running and what software version is the MDS on?

The MDS must have R80.30 JHF T210 or higher installed and the servers must either be running Windows Server 2016 or Windows Server 2019.

Re: MUH2

Magnus-Holmberg — Thu, 23 Sep 2021 12:21:25 GMT

MDS running R81 HFA36
Server running Windows Server 2019 standard

Re: MUH2

AaronCP — Tue, 01 Feb 2022 19:42:52 GMT

Hey @Magnus-Holmberg,

Firstly, big fan of your YouTube content! It's been a great resource for me - so thank you!

Secondly, did you ever find a resolution for this issue? I'm not running VSX, but I am hitting a similar issue. The machine authentication is working perfectly, but I am not getting any user-based authentication & I see the same error as your screenshot.

Any advise would be much appreciated.

Thanks,

Aaron.

Re: MUH2

Magnus-Holmberg — Tue, 01 Feb 2022 19:57:38 GMT

Thank you 🙂

Yes its working now, but i dont remember what the issue was.
We are going to install it on more servers so i will see if i get the same issue, but so far its working correctly.
We are currently running R81 HFA44 on the MDS.

When it comes to VSX and IA in general, its important to think about how the traffic is going towards ia stuff.
If the traffic is generating from VS or VSX Cluster. (this is something that is easy to miss)

Re: MUH2

bsc — Thu, 27 Apr 2023 14:35:30 GMT

@AaronCP may I return the question to you? Could you find a solution for this?

Re: MUH2

bsc — Tue, 13 Jun 2023 16:35:52 GMT

just to answer my own question: My Problem is solved in https://support.checkpoint.com/results/sk/sk87200

The issue happened for accounts, where sAMA and UPN do not match.

Re: MUH2

israelfds95 — Tue, 06 May 2025 22:52:44 GMT

I posted how I solved: https://community.checkpoint.com/t5/General-Topics/SOLVED-Identity-Agent-Terminal-Server-Users-Not-Authenticated/m-p/248279#M41486