topic Re: Can I setup the script to logout user for IA session? in General Topics

Can I setup the script to logout user for IA session?

Roy_Tam — Tue, 11 Jun 2019 07:08:34 GMT

We are using the AD to authenticate the user to access web browsing and internet application. The user access is granted for 720 minutes. For example, the user logon the IA at 8:00am yesterday, then relogon at 8:00pm. On the next day, the session should be expired at 8:00am again. The problem is, the user will observe the disconnection if he's back to office earlier then 8:00am. Usually, the IA session should be timeout if the user's back to office after 8:00am, and the session will be connected when the PC logon.

Is it possible to run the script to logoff the IA when the user logoff the PC? Or can run the scheduled script on Checkpoint to force the user logoff the IA at mid-night?

Re: Can I setup the script to logout user for IA session?

_Val_ — Tue, 11 Jun 2019 08:19:36 GMT

If you are using Identity Agent, you will ahve the desired behaviour

Re: Can I setup the script to logout user for IA session?

Roy_Tam — Wed, 12 Jun 2019 00:17:22 GMT

So it's not able to add scripting to force logoff the user from IA?

Can I check who is the users is logging on the IA?

Re: Can I setup the script to logout user for IA session?

KennyManrique — Wed, 12 Jun 2019 03:06:57 GMT

You can use the IA API calls for Delete Identity:

https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_IdentityAwareness_AdminGuide/html_frameset.htm

Re: Can I setup the script to logout user for IA session?

Roy_Tam — Wed, 12 Jun 2019 04:52:40 GMT

Thanks a lot for the document!