topic Re: AD-otherMailbox as alternative for DynamicID in SASE and Remote Access

AD-otherMailbox as alternative for DynamicID

Dreyfuss — Wed, 29 Sep 2021 13:28:59 GMT

Hi there!

I´m looking for DynamicID settings using an alternative field described as "otherMailbox" in AD, instead os field mail, in Mobile Security Settings.

Where do I can change, in GUIDBEdit (per example) this field, so the OTP password could be send to the otherMailbox $EMAIL as described in

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92567

and

https://community.checkpoint.com/t5/Remote-Access-VPN/Change-source-for-LDAP-phone-info-for-DynamicID/td-p/30205

Any help is welcome, thanks in advance.

Re: AD-otherMailbox as alternative for DynamicID

G_W_Albrecht — Mon, 04 Oct 2021 13:45:57 GMT

Did you try to use sk92567 to set PhoneNumberAttr to otherMailbox ? Would be a question for TAC...

Re: AD-otherMailbox as alternative for DynamicID

Dreyfuss — Fri, 08 Oct 2021 11:17:09 GMT

No yet. I´ll gonna try this. Thank you so much!

Re: AD-otherMailbox as alternative for DynamicID

AndréTinoco — Fri, 08 Oct 2021 15:49:56 GMT

After you change the "PhoneNumberAttr" as per sk92567, as suggested by G_W_Albrecht, you might need to use the $PHONE instead of $EMAIL on the configuration syntax:

mail:TO=$PHONE;SMTPSERVER=smtp.example.com;FROM=sslvpn@example.com;BODY=$RAWMESSAGE