topic Endpoint Security access via AD groups in SASE and Remote Access

Endpoint Security access via AD groups

Aaron_Thomson — Mon, 09 Nov 2020 22:41:50 GMT

Hi,

We currently use checkpoint (R80.20) local user accounts (with RADIUS authentication) for endpoint security clients to connect via RAS VPN. The current checkpoint local accounts are all lower case and don't work if we get the username case wrong.

We want to use User Directory and AD groups. The AD accounts in these groups are mixed case, will this cause issues when the user logs on without the correct case?

Also, do we need a license for "User Directory"? We currently have Infinity license which i believe covers everything.

Thanks for your assistance, much appreciated!

Aaron

Re: Endpoint Security access via AD groups

PhoneBoy — Wed, 11 Nov 2020 23:24:20 GMT

I believe case sensitivity will still be an issue.
You probably won't need a User Directory license.
For an explanation of this legacy feature, see: https://community.checkpoint.com/t5/General-Topics/User-Directory-vs-Identity-Awareness/m-p/21864/highlight/true#M4085

Re: Endpoint Security access via AD groups

Aaron_Thomson — Wed, 11 Nov 2020 23:30:19 GMT

Thanks PhoneBoy, we are working to standardize the naming. Appreciate your reply.