topic Re: AD users not blocking web category on checkpoint firewall 6400 in Firewall and Security Management

AD users not blocking web category on checkpoint firewall 6400

Srajesh — Mon, 24 Apr 2023 09:34:50 GMT

Hi,

We have configure Web category on checkpoint firewall 6400 and web category not blocking.

We have checked AD sync happening and Connection status : has connection.

Thanks & Regards

S Rajesh

Re: AD users not blocking web category on checkpoint firewall 6400

Chris_Atkinson — Mon, 24 Apr 2023 09:40:43 GMT

Hello,

We will need considerably more info to assist you.

Version, Jumbo, HTTPS inspection and more...

Re: AD users not blocking web category on checkpoint firewall 6400

Srajesh — Mon, 24 Apr 2023 09:52:12 GMT

Hi,

Checkpoint firewall standalone deployment

Gateway version: R81.10

Hot Fix Jumbo Bundle: T94

Thanks & Regards

S Rajesh

Re: AD users not blocking web category on checkpoint firewall 6400

Chris_Atkinson — Mon, 24 Apr 2023 11:00:39 GMT

Bearing in my HTTPS inspection is disabled, can you provide an example of what's not working and the rule you have configured?

Re: AD users not blocking web category on checkpoint firewall 6400

Srajesh — Mon, 24 Apr 2023 11:24:00 GMT

Please find the attached screenshot of rules.

Rules no 1: IP based created rules (Web category is blocking), When i have disabled rules no 1 all web category is not blocking.

Rules no 2,3 & 4 : AD users group based created rules ( Web category not blocking).

Re: AD users not blocking web category on checkpoint firewall 6400

Chris_Atkinson — Mon, 24 Apr 2023 11:59:33 GMT

Thanks and are you using IDC or ADQuery for Identity and confirmed connectivity with AD is operating correctly?

Re: AD users not blocking web category on checkpoint firewall 6400

Srajesh — Mon, 24 Apr 2023 12:40:33 GMT

1)We are using ADQuery for identity
2)Connection status : has connection
3)no issues with authentication
4)AD users "Roles" not being updated or pulled
5)User group is unavailable

Re: AD users not blocking web category on checkpoint firewall 6400

Ruan_Kotze — Mon, 24 Apr 2023 19:54:48 GMT

Seems you are acquiring identities fine, but not matching them to Access Roles? Are your LDAP lookups working - have a look at sk55040 and here for ways to test.

Might be something as simple as needing to fetch signatures on your LDAP Account Unit.