<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Branch Office - User Authentication Blocked by Internet Access Policy in SASE and Remote Access</title>
    <link>https://community.checkpoint.com/t5/SASE-and-Remote-Access/Branch-Office-User-Authentication-Blocked-by-Internet-Access/m-p/192318#M1072</link>
    <description>&lt;P&gt;Goal:&lt;BR /&gt;To allow devices to become part of the "&lt;STRONG&gt;Any Identified User&lt;/STRONG&gt;" group without providing "Any Internet" access. (Authentication before access)&lt;BR /&gt;&lt;BR /&gt;I am setting up a new Branch Office and would like there to be Identity Authentication on any device before it is given internet access. I have network access to my Domain Controllers and have tried adding a giant list of Microsoft, Azure, and Domain services.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;This is a Cisco Meraki Branch office.&lt;/LI&gt;&lt;LI&gt;Harmony Connect Application does not connect unless I provide the network with "&lt;STRONG&gt;* Internet&lt;/STRONG&gt;"&lt;/LI&gt;&lt;LI&gt;The Application has no trouble connecting when not behind the branch office&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Below is the list of objects I have attempted using to provide User Authentication:&lt;BR /&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Current list of allowed destinations.png"&gt;&lt;img src="https://community.checkpoint.com/skins/images/82DEA52ADD2815BFCF8F1DA03561AFBA/responsive_peak/images/image_not_found.png" alt="Current list of allowed destinations.png" /&gt;&lt;/span&gt;&lt;BR /&gt;&lt;BR /&gt;Willing to give whatever a try as this is a test environment.&lt;/P&gt;</description>
    <pubDate>Mon, 11 Sep 2023 20:51:54 GMT</pubDate>
    <dc:creator>zaryhu</dc:creator>
    <dc:date>2023-09-11T20:51:54Z</dc:date>
    <item>
      <title>Branch Office - User Authentication Blocked by Internet Access Policy</title>
      <link>https://community.checkpoint.com/t5/SASE-and-Remote-Access/Branch-Office-User-Authentication-Blocked-by-Internet-Access/m-p/192318#M1072</link>
      <description>&lt;P&gt;Goal:&lt;BR /&gt;To allow devices to become part of the "&lt;STRONG&gt;Any Identified User&lt;/STRONG&gt;" group without providing "Any Internet" access. (Authentication before access)&lt;BR /&gt;&lt;BR /&gt;I am setting up a new Branch Office and would like there to be Identity Authentication on any device before it is given internet access. I have network access to my Domain Controllers and have tried adding a giant list of Microsoft, Azure, and Domain services.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;This is a Cisco Meraki Branch office.&lt;/LI&gt;&lt;LI&gt;Harmony Connect Application does not connect unless I provide the network with "&lt;STRONG&gt;* Internet&lt;/STRONG&gt;"&lt;/LI&gt;&lt;LI&gt;The Application has no trouble connecting when not behind the branch office&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Below is the list of objects I have attempted using to provide User Authentication:&lt;BR /&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Current list of allowed destinations.png"&gt;&lt;img src="https://community.checkpoint.com/skins/images/82DEA52ADD2815BFCF8F1DA03561AFBA/responsive_peak/images/image_not_found.png" alt="Current list of allowed destinations.png" /&gt;&lt;/span&gt;&lt;BR /&gt;&lt;BR /&gt;Willing to give whatever a try as this is a test environment.&lt;/P&gt;</description>
      <pubDate>Mon, 11 Sep 2023 20:51:54 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SASE-and-Remote-Access/Branch-Office-User-Authentication-Blocked-by-Internet-Access/m-p/192318#M1072</guid>
      <dc:creator>zaryhu</dc:creator>
      <dc:date>2023-09-11T20:51:54Z</dc:date>
    </item>
  </channel>
</rss>

