topic Re: Multi-user IA client and IAtool in Firewall and Security Management

Multi-user IA client and IAtool

Alex- — Thu, 18 Jan 2018 10:22:44 GMT

Hi Mates,

I'm trying to automate the IA MUH tool, and I use the IA tool to create an MSI package. However, I am unable to copy the shared secret, which means that even though I use the MSI, I still need to manually enter once the shared secret, which is quite a bore for the number of PC's to deploy at the customer site.

I wonder then:

- Is it supported? If yes, how

- Is leaving the shared secret field blank an option (deployment is contained within a single organization)

Also, when I use IATools, if I check "use this PC settings", the software always crashes (tested on W7, W8, W10,...).

Thanks for any input,

Kind regards,

Alex

Re: Multi-user IA client and IAtool

PhoneBoy — Fri, 19 Jan 2018 23:29:40 GMT

Have you opened a ticket with TAC on the IATools crashing?

Contact Support | Check Point Software

Re: Multi-user IA client and IAtool

Tzvi_Katz — Mon, 22 Jan 2018 19:16:06 GMT

Hi,

How many TS servers are you attempting to install? I personally think that storing the password in MSI is more problematic security wise compared to the boredom

Regards,

Tzvi Katz

Re: Multi-user IA client and IAtool

Alex- — Tue, 23 Jan 2018 08:04:25 GMT

Not yet, but I will when I'm back at the customer.

Re: Multi-user IA client and IAtool

Alex- — Tue, 23 Jan 2018 08:05:04 GMT

It's about 600 computers. It's an environment with heavy multi-user logon so the TS agent was recommended.

Re: Multi-user IA client and IAtool

Sigbjorn — Mon, 05 Mar 2018 12:42:48 GMT

The Shared Secret is available(hashed) in the registry, so we just ended up installing the client manually on one machine, set the secret and export the registry keys.

Then with the deployment on new servers, we just push the registry keys with the installation, and we're up and running.