topic Re: Are OU user groups still supported in R80.10 mobile access portal in SASE and Remote Access

Are OU user groups still supported in R80.10 mobile access portal

Johannes_Schoen — Sun, 22 Sep 2019 10:04:59 GMT

Hi Community,

I was at a customer with a preexisting R77.30 enviroment and MobileAccess portal.
We upgraded to R80.10.
The MAB policy assigns the applications by an user-group object, which refers to an LDAP OU path.

Typically, I only knew/auhtorized access with AD-Users or AD-Groups - so my question: Is that setup supported with R80.10?

Best Regards
Johannes

Re: Are OU user groups still supported in R80.10 mobile access portal

PhoneBoy — Sun, 22 Sep 2019 16:00:34 GMT

As far as I know, none of this changed in R80.x.
Even if you're using the unified policy for MAB in R80.x, a lot of configuration is still done in SmartDashboard, so the UI hasn't changed.

Re: Are OU user groups still supported in R80.10 mobile access portal

Johannes_Schoen — Mon, 23 Sep 2019 09:23:41 GMT

Okay, the OU based policy doesn't get triggered, the LDAP group based does.
Is there any debug command on the gateway to show, which users from firewall view are member of the group?

Re: Are OU user groups still supported in R80.10 mobile access portal

PhoneBoy — Tue, 24 Sep 2019 03:56:17 GMT

If not here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk104577
Then I recommend getting the TAC involved.