topic Re: Use radius authentication to identify users on the logs in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88760#M79785 <P>What is serving the Captive Portal, Check Point or something else?</P> <P>Note Identity Awareness supports RADIUS accounting and Browser based authentication.</P> Tue, 16 Jun 2020 10:50:52 GMT Chris_Atkinson 2020-06-16T10:50:52Z Use radius authentication to identify users on the logs https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88750#M79784 <P>Dear Everyone,</P><P>The customer is using radius to authenticate the users on their captive portal. The radius server pull the users on their Open LDAP server. I would like to know if it is possible to show the source username on the logs using radius or ldap. The version of their gateway is r80.30.&nbsp;</P><P>&nbsp;</P><P>Regards,</P><P>AJ</P> Tue, 16 Jun 2020 09:09:08 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88750#M79784 AdrianJames 2020-06-16T09:09:08Z Re: Use radius authentication to identify users on the logs https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88760#M79785 <P>What is serving the Captive Portal, Check Point or something else?</P> <P>Note Identity Awareness supports RADIUS accounting and Browser based authentication.</P> Tue, 16 Jun 2020 10:50:52 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88760#M79785 Chris_Atkinson 2020-06-16T10:50:52Z Re: Use radius authentication to identify users on the logs https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88766#M79786 It is someone else. They have different device serving the Captive portal. Is it okay if I could get the sk for configuring the radius accounting? Tue, 16 Jun 2020 11:16:31 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88766#M79786 AdrianJames 2020-06-16T11:16:31Z Re: Use radius authentication to identify users on the logs https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88768#M79787 <P>Hey,</P> <P>Try going to audit logs and use the query "Authentication method: radius" AND operation:"Log In".</P> <P>Try to open one of the logs and see if there's additional information that could help you distinguish between users. If every user has different administrator that should be enough.</P> <P>Tell me if this helps you.</P> <P>Amir</P> Tue, 16 Jun 2020 11:28:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88768#M79787 Amir_Senn 2020-06-16T11:28:20Z Re: Use radius authentication to identify users on the logs https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88770#M79788 <P>It's covered in the Identity Awareness admin guide, some further discussion was recently had on it here also:&nbsp;</P> <P><A href="https://community.checkpoint.com/t5/General-Management-Topics/Identity-Awareness-question/m-p/82342" target="_blank">https://community.checkpoint.com/t5/General-Management-Topics/Identity-Awareness-question/m-p/82342</A></P> Tue, 16 Jun 2020 11:33:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88770#M79788 Chris_Atkinson 2020-06-16T11:33:17Z Re: Use radius authentication to identify users on the logs https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88792#M79789 <P>Thank you Amirse. I will check this as well.&nbsp;</P> Tue, 16 Jun 2020 14:13:14 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88792#M79789 AdrianJames 2020-06-16T14:13:14Z Re: Use radius authentication to identify users on the logs https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88793#M79790 Thank you Chris. I will check this. Tue, 16 Jun 2020 14:14:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Use-radius-authentication-to-identify-users-on-the-logs/m-p/88793#M79790 AdrianJames 2020-06-16T14:14:36Z