topic Identity Awareness in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness/m-p/10158#M99723 <HTML><HEAD></HEAD><BODY><P>Hey all</P><P></P><P>I had a question that bug me this day , was it mandatory or not to set up internal dns instead of the isp one when you have identity awareness enabled on your gateway?</P><P></P><P>thanks in advance</P></BODY></HTML> Wed, 08 Nov 2017 16:04:34 GMT Marco_Valenti 2017-11-08T16:04:34Z Identity Awareness https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness/m-p/10158#M99723 <HTML><HEAD></HEAD><BODY><P>Hey all</P><P></P><P>I had a question that bug me this day , was it mandatory or not to set up internal dns instead of the isp one when you have identity awareness enabled on your gateway?</P><P></P><P>thanks in advance</P></BODY></HTML> Wed, 08 Nov 2017 16:04:34 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness/m-p/10158#M99723 Marco_Valenti 2017-11-08T16:04:34Z Re: Identity Awareness https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness/m-p/10159#M99724 <HTML><HEAD></HEAD><BODY><P class="">DNS is not relevant to Identity Awareness.</P><P class="">What is relevant is the connection to Active Directory, which can happen via WMI or using the Identity Collector.</P><P class="">You can also use RADIUS Accounting or the Identity Awareness API.</P></BODY></HTML> Wed, 08 Nov 2017 17:29:21 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness/m-p/10159#M99724 PhoneBoy 2017-11-08T17:29:21Z Re: Identity Awareness https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness/m-p/10160#M99725 <HTML><HEAD></HEAD><BODY><P>Yes. So once firewall gets request, it send to AD for authentication and if it is successful then User to IP mapping is done and connections is allowed. There is no concern with DNS for identity awareness.&nbsp;</P></BODY></HTML> Wed, 08 Nov 2017 18:06:40 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness/m-p/10160#M99725 Gaurav_Pandya 2017-11-08T18:06:40Z