topic Re: Checkpoint LDAP Integration in Firewall and Security Management

Checkpoint LDAP Integration

ikafka — Wed, 29 Nov 2023 07:13:20 GMT

Hi,

First of all, I want to talk about the structure. There is an AD with many (hundreds of thousands) users. A remote Checpoint firewall is pulling users from this AD. I configured Identityy Awernes, but since the location is remote and there are too many users, user queries take a long time.

I think the problem will be solved if I pull the organization unit part of the region where the firewall is from the AD. When searching or querying users, it speeds up if it is done from a certain organization unit instead of all users.
-Can I do this organization unit part with Identity collector?
-If I can, can you share the relevant document?

Or can you suggest if there is another solution?

Thanks.

Re: Checkpoint LDAP Integration

G_W_Albrecht — Wed, 29 Nov 2023 10:06:03 GMT

sk88520: Best Practices - Identity Awareness Large Scale Deployment

sk170765: Identity Awareness Scalable Design - Identity Agent

sk86441: ATRG: Identity Awareness

Re: Checkpoint LDAP Integration

ikafka — Fri, 01 Dec 2023 11:07:32 GMT

Hi @G_W_Albrecht

Thanks for your reply and for sharing this information. I have not yet been able to provide controls in the environment. I will share the solution information when it is finalized.

Re: Checkpoint LDAP Integration

ikafka — Fri, 05 Jan 2024 06:48:13 GMT

I installed with identity collector but there are small problems.

It is now doing user verification in the rules. But I want to cancel this rule and write a new rule. With this new rule, I want to check that only one computer is in a certain OU (organization unit). If this computer is in the OU, it passes the rule. I couldn't figure out how to do this rule.

Re: Checkpoint LDAP Integration

PhoneBoy — Fri, 05 Jan 2024 20:39:42 GMT

I believe you can refer to individual machines in the Access Role, but I don't think we support groups for this function.

Re: Checkpoint LDAP Integration

ikafka — Tue, 16 Jan 2024 10:19:03 GMT

Hi,

We install identity Collector and our problem solved.

Our environment have 42 ADC and we use 35 ADC with İdentity Collector.