topic Re: AD account used on Cluster in Firewall and Security Management

AD account used on Cluster

velo — Wed, 26 Feb 2025 13:48:08 GMT

A colleague who used to work on our environment has left the company. At some point, they created an AD account with "Checkpoint" in the description.

Since our Checkpoint cluster is managed via Central Management, where are all the places this AD account could have been used? I’m thinking in terms of authentication, policy management, or anything else it might be tied to.

Also, any tips on how to track down where it’s being used would be really helpful.

I log on to Smart Console with local account so it's not that Auth.

Re: AD account used on Cluster

PhoneBoy — Wed, 26 Feb 2025 18:22:35 GMT

The primary place this would be used is in Identity Awareness which is partially configured in the relevant gateway objects.
If AD Query is used, it might be a good opportunity to move to Identity Collector instead. 🙂
See also LDAP Account Units.

Re: AD account used on Cluster

the_rock — Wed, 26 Feb 2025 23:28:33 GMT

Apart from what @PhoneBoy advised, I would say you can also check Guidbedit for any further references too.

Andy

Re: AD account used on Cluster

velo — Thu, 27 Feb 2025 10:21:44 GMT

Thanks both for your answers.

Re: AD account used on Cluster

velo — Thu, 27 Feb 2025 10:22:00 GMT

Cheers, good idea

Re: AD account used on Cluster

the_rock — Thu, 27 Feb 2025 12:02:05 GMT

You might not find anything there, but if normal way does not work, then its another option.

Andy