topic Re: Outsourcing the UserCheck site? in Firewall and Security Management

Outsourcing the UserCheck site?

Kryten — Thu, 02 Jun 2022 11:38:09 GMT

Hey all!

I am currently searching for Info about the possibility to run the UserCheck Site on an external Server and not on the Gateway.

All I found so far is the Info from an Admin Guide, where it states that you can use a redirect to an external site that gathers the auth data and sends it to the Gateway. But thats just one sentence and there seems to be no Info at all on how to do that exactly.

I am not very familiar with building Websites or how to configure a Webserver (Apache I guess?) correctly for this, but I would have thought that you need at least some Info about what kind of variables or methods need to be used in order to make this work.

Can anyone point me to some better documentation about this?

Re: Outsourcing the UserCheck site?

_Val_ — Thu, 02 Jun 2022 11:44:36 GMT

Sure, look into sk83700, there is a way to redirect to an external site mentioned there, among other customisation options

Re: Outsourcing the UserCheck site?

Kryten — Thu, 02 Jun 2022 11:57:05 GMT

Thanks for the super fast reply!
Either I am blind or stupid right now, but I cannot find any info in that SK about how to run the Usercheck portal on an external server.

Re: Outsourcing the UserCheck site?

G_W_Albrecht — Thu, 02 Jun 2022 14:46:03 GMT

(VI) Redirect to Static External .com Web Site

The normal behavior for UserCheck will be to intercept the URL requested by the user, present inform or ask page, then redirect the user to the originally requested URL. This customization will instead always redirect the user to the pre-configured, embedded, web site.

But as i do understand this, users get redirected to the web site after UserCheck page. So this is not what you want, i think...

Re: Outsourcing the UserCheck site?

Kryten — Thu, 02 Jun 2022 16:52:53 GMT

No, what I would like to do is to host the UserCheck Portal on another server instead of it running on the gateway. It seems to cause quite a bit of load when a lot of users are using it and our customer thought that it could be a relatively easy way to offload some of the load on the Gateway to somewhere else.

Sorry for describing it badly earlier 🙂

Re: Outsourcing the UserCheck site?

PhoneBoy — Fri, 03 Jun 2022 04:42:08 GMT

The UserCheck portal does not run on an external server.
That said, you can redirect to an external server, which can include some data that would be displayed by UserCheck.

You may want to review the following SK to address the performance issue with the UserCheck Portal: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk148612&partition=Advanced&product=URL

Re: Outsourcing the UserCheck site?

G_W_Albrecht — Fri, 03 Jun 2022 08:54:37 GMT

I would suggest optimizing performance of the GWs:

sk98348: Best Practices - Security Gateway Performance

sk167553: Performance Investigation Procedure - How To