topic Re: Using RADIUS Groups to Assign Permissions on SMBs? in Spark Firewall (SMB) https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32695#M1341 <HTML><HEAD></HEAD><BODY><P>Yes, i understand very well - it just sounded as if by some magic&nbsp;trick you could remove a SMB limitation. And we know this is not true...</P></BODY></HTML> Thu, 14 Feb 2019 13:58:48 GMT G_W_Albrecht 2019-02-14T13:58:48Z Using RADIUS Groups to Assign Permissions on SMBs? https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32690#M1336 <HTML><HEAD></HEAD><BODY><P>Hello everyone,</P><P></P><P>I use a RADIUS proxy (DUO) which handles 2FA for Remote Access authentication in locally managed SMB appliances.</P><P></P><P>The user database is active directory. Duo can use either LDAP or RADIUS to connect to the AD.</P><P></P><P>Is it possible to use the RADIUS groups to assign permissions?</P><P></P><P>I took a look at the procedure described in&nbsp;<A href="https://community.checkpoint.com/thread/6321">) to Assign Permissions</A>, but some steps are not really compatible with what we have in local management. I tried using attribute 25 or vendor specific 229 as described without success.</P><P></P><P>Is it possible? Did anyone here ever accomplish that?</P></BODY></HTML> Tue, 12 Feb 2019 15:47:16 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32690#M1336 Pedro_Espindola 2019-02-12T15:47:16Z Re: Using RADIUS Groups to Assign Permissions on SMBs? https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32691#M1337 <HTML><HEAD></HEAD><BODY><P>I would involve TAC here ! Although nothing about that is mentioned in&nbsp;sk105380, it may well be that this is just not supported here...</P></BODY></HTML> Wed, 13 Feb 2019 14:53:42 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32691#M1337 G_W_Albrecht 2019-02-13T14:53:42Z Re: Using RADIUS Groups to Assign Permissions on SMBs? https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32692#M1338 <HTML><HEAD></HEAD><BODY><P>Yeah, I will.</P><P></P><P>I just think that in this kind of situations,&nbsp;Check Mates deploying SMBs daily and trying to work around the same limitations as I am are much more likely to know an answer or a cool trick to make it work.</P><P></P><P>Thanks Günther.</P></BODY></HTML> Thu, 14 Feb 2019 12:25:23 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32692#M1338 Pedro_Espindola 2019-02-14T12:25:23Z Re: Using RADIUS Groups to Assign Permissions on SMBs? https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32693#M1339 <HTML><HEAD></HEAD><BODY><P>It is a nice picture - and SMBs have a lot to explore and find ones own answers. But limitations, mostly, are limitations&nbsp;and can (or should) not be lifted by any cool trick.&nbsp;</P></BODY></HTML> Thu, 14 Feb 2019 12:45:29 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32693#M1339 G_W_Albrecht 2019-02-14T12:45:29Z Re: Using RADIUS Groups to Assign Permissions on SMBs? https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32694#M1340 <HTML><HEAD></HEAD><BODY><P>Ok fair enough. But you know SMBs are not super well documented, not as much as the enterprise versions at least. So we do find out a lot by testing and exploring. That is all I meant.</P></BODY></HTML> Thu, 14 Feb 2019 13:05:26 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32694#M1340 Pedro_Espindola 2019-02-14T13:05:26Z Re: Using RADIUS Groups to Assign Permissions on SMBs? https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32695#M1341 <HTML><HEAD></HEAD><BODY><P>Yes, i understand very well - it just sounded as if by some magic&nbsp;trick you could remove a SMB limitation. And we know this is not true...</P></BODY></HTML> Thu, 14 Feb 2019 13:58:48 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/32695#M1341 G_W_Albrecht 2019-02-14T13:58:48Z Re: Using RADIUS Groups to Assign Permissions on SMBs? https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/101677#M4357 <P>Hi Pedro. Did you ever get a solution for this?</P> Tue, 10 Nov 2020 19:01:23 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Using-RADIUS-Groups-to-Assign-Permissions-on-SMBs/m-p/101677#M4357 BorisL 2020-11-10T19:01:23Z