topic Re: Issue with User Awareness Query on Check Point SMB (Locally Managed) in Spark Firewall (SMB)

Issue with User Awareness Query on Check Point SMB (Locally Managed)

rozkie20 — Wed, 26 Mar 2025 09:26:49 GMT

Hi Everyone,

We are currently configuring User Awareness on a Check Point SMB firewall with local management, but we are unable to query users from our Active Directory (AD) server.

We are using a non-administrator account and have modified the group permissions according to sk93938 (Using Identity Awareness AD Query without Active Directory Administrator privileges on Windows Server 2008 and higher).

Troubleshooting Steps Taken:
We confirmed that the Gateway can ping the AD server.

The Gateway can access the AD server on port 389 (verified through firewall logs).

We also tested authentication using an Administrator account to rule out permission issues, but the problem persists.

Has anyone encountered this issue when using local deployment? Any insights would be greatly appreciated.

Thanks for reading!

Re: Issue with User Awareness Query on Check Point SMB (Locally Managed)

G_W_Albrecht — Wed, 26 Mar 2025 10:00:59 GMT

Can you please specify model and firmware of the SMB ? Where is the AD situated, locally at site ?

Re: Issue with User Awareness Query on Check Point SMB (Locally Managed)

rozkie20 — Wed, 26 Mar 2025 10:08:03 GMT

Hi Albrecht,

We using CP 2000 series with firmware 81.10.15

Re: Issue with User Awareness Query on Check Point SMB (Locally Managed)

G_W_Albrecht — Wed, 26 Mar 2025 10:09:21 GMT

Where is the AD situated, locally at site ?

Re: Issue with User Awareness Query on Check Point SMB (Locally Managed)

rozkie20 — Wed, 26 Mar 2025 10:13:52 GMT

We using AD server locally site with topo seem like this

Re: Issue with User Awareness Query on Check Point SMB (Locally Managed)

G_W_Albrecht — Wed, 26 Mar 2025 10:26:05 GMT

So the issue seems the internal firewall - did you enable IA there also and set it to Identity Sharing ?

Re: Issue with User Awareness Query on Check Point SMB (Locally Managed)

rozkie20 — Wed, 26 Mar 2025 11:02:13 GMT

I am just test this option on internal firewall but it seem to not working.

Re: Issue with User Awareness Query on Check Point SMB (Locally Managed)

PhoneBoy — Wed, 26 Mar 2025 14:04:03 GMT

That will only work with gateways managed by the same management, which is not the case here since your SMB gateway is locally managed.
I suspect you'll need a TAC case to understand why you're getting an internal error adding the AD server.

Re: Issue with User Awareness Query on Check Point SMB (Locally Managed)

G_W_Albrecht — Wed, 26 Mar 2025 14:21:41 GMT

So one solution would be to put SMB GW under same management as internal GW...