topic Re: connect to local ActiveDirectory in SASE and Remote Access

connect to local ActiveDirectory

Wolfgang — Wed, 24 May 2023 05:32:41 GMT

We want to use Harmony connect remote access to publish some SSH and RDP hosts. For authentication we want to integrate a local ActiveDirectory (not Azure). Following the documentation this can be done via AD FS (ActiveDirectory FederationServices).

The customer has already an AD connect for their gateways via LDAP-account unit in Smart-1 cloud. Is it possible to use these with Harmony connect or do we have to configure the ActiveDirectory connect in both products ?

Re: connect to local ActiveDirectory

PhoneBoy — Wed, 24 May 2023 20:51:29 GMT

Is the customer managing Harmony Connect with SmartConsole or via Infinity Portal?

Re: connect to local ActiveDirectory

Wolfgang — Thu, 25 May 2023 06:09:17 GMT

We have the choice, it's a new deployment for Harmony connect. At the moment only Smart-1 cloud is used.

Re: connect to local ActiveDirectory

PhoneBoy — Thu, 25 May 2023 20:53:27 GMT

If your Harmony Connect is managed separately, you would obviously have to configure it in both places.
There's a limitation on Access Roles when using a SmartConsole-managed Harmony Connect per https://support.checkpoint.com/results/sk/sk156632
That suggests you would need to configure it both places.