topic Re: local firewall rules to allow smb traffic from a Ad security group or CPHE virtual group in Endpoint https://community.checkpoint.com/t5/Endpoint/local-firewall-rules-to-allow-smb-traffic-from-a-Ad-security/m-p/211082#M8509 <P>A domain group is an object that contains multiple domain objects.<BR />A domain object refers to a specific FQDN.<BR /><A href="https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Managing-Firewall-Objects-and-Groups.htm" target="_blank">https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Managing-Firewall-Objects-and-Groups.htm</A>&nbsp;</P> Thu, 11 Apr 2024 17:19:34 GMT PhoneBoy 2024-04-11T17:19:34Z local firewall rules to allow smb traffic from a Ad security group or CPHE virtual group https://community.checkpoint.com/t5/Endpoint/local-firewall-rules-to-allow-smb-traffic-from-a-Ad-security/m-p/209385#M8428 <P>We are looking to use the firewall and compliance blade of Harmony Endpoint to block smb connections to computers from non-IT machines as IT machines Can be on multiple different vlans ( IT, AOVPN, other areas when a tech is posted in an area that is currently having issues) I was hoping to set two rules.</P><P>&nbsp;</P><P>one that allows smb traffic from an AD security group or checkpoint virtual group, followed by one that blocks all smb traffic, however when I have tried to do this I seem unable to set an AD group or virtual group as a source. there is an option to set a domain group as source, but I am unable to find anywhere that says how you define what a domain group is.</P><P>&nbsp;</P><P>Any suggestions?</P> Thu, 21 Mar 2024 09:52:43 GMT https://community.checkpoint.com/t5/Endpoint/local-firewall-rules-to-allow-smb-traffic-from-a-Ad-security/m-p/209385#M8428 STUARTROSE-WSH 2024-03-21T09:52:43Z Re: local firewall rules to allow smb traffic from a Ad security group or CPHE virtual group https://community.checkpoint.com/t5/Endpoint/local-firewall-rules-to-allow-smb-traffic-from-a-Ad-security/m-p/211082#M8509 <P>A domain group is an object that contains multiple domain objects.<BR />A domain object refers to a specific FQDN.<BR /><A href="https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Managing-Firewall-Objects-and-Groups.htm" target="_blank">https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Managing-Firewall-Objects-and-Groups.htm</A>&nbsp;</P> Thu, 11 Apr 2024 17:19:34 GMT https://community.checkpoint.com/t5/Endpoint/local-firewall-rules-to-allow-smb-traffic-from-a-Ad-security/m-p/211082#M8509 PhoneBoy 2024-04-11T17:19:34Z