topic Re: Radius authentication default value setting on global properties in General Topics

Radius authentication default value setting on global properties

ganeshan_dharm1 — Fri, 09 Mar 2018 16:02:18 GMT

what is the impact of changing default value of "Radius ignore setting from "0" to "76" on Manage>Policy>Global Properties ->Select Smart Dashboard Customization from the list of options-> Under the Advanced Configuration option, select the Configure button-> Select FireWall-1 >Authentication>RADIUS from the left toolbar

Re: Radius authentication default value setting on global properties

PhoneBoy — Fri, 09 Mar 2018 20:56:21 GMT

Basically it tells us to ignore when certain RADIUS attributes appear to be invalid or malformed on our end.

The setting is discussed here: RADIUS authentication fails with "RADIUS servers not responding" log in SmartView Tracker

Re: Radius authentication default value setting on global properties

ganeshan_dharm1 — Tue, 20 Mar 2018 23:06:19 GMT

do you have any sk or doc available to change the attribute value for UID in the RSA authentication manager for checkpoint firewalls?.

Though we configured UID as "0" in the checkpoint web url , we still get "96" in the firewall. so extended commands are not working.

I found one for NPS,but that didn't help for RSA

Re: Radius authentication default value setting on global properties

PhoneBoy — Wed, 21 Mar 2018 02:19:29 GMT

The UID is always going to be non-zero.

The way the RADIUS server tells us the user is entitled to superuser privileges is to set Vendor Attribute ID 230 to value 1.

This is done on the RADIUS server, which means you should consult RSA for the appropriate documentation.

However, a quick Internet search led me to the following: RADIUS User Attributes | RSA Link

Re: Radius authentication default value setting on global properties

Alex_Weldon — Fri, 23 Mar 2018 19:58:32 GMT

A combination of these three might help:

How to Setup Authentication for Admins – WebUI / SSH/ SmartDashboard – Check Point GAIA | Indeni

sk72940

sk98958