topic Re: User Awareness - Active Directory on a Remote site in Spark Firewall (SMB) https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16843#M538 <HTML><HEAD></HEAD><BODY><P>yes, the AD is part of the VPN domain.</P></BODY></HTML> Tue, 18 Dec 2018 12:09:14 GMT GabsOliv 2018-12-18T12:09:14Z User Awareness - Active Directory on a Remote site https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16839#M534 <HTML><HEAD></HEAD><BODY><P>Hi</P><P>Have my Active directory on main site. On Remote site, have a SMB appliance (770). Both sites are connected by a VPN tunnel.</P><P>On the appliance on the remote site, i need to configure user Awareness. By default when connecting to AD, the sour IP used is from wan interface. How can i force this traffic to have LAN sour IP and go over VPN ?</P><P></P><P>Thanks</P></BODY></HTML> Mon, 17 Dec 2018 23:49:05 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16839#M534 GabsOliv 2018-12-17T23:49:05Z Re: User Awareness - Active Directory on a Remote site https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16840#M535 <HTML><HEAD></HEAD><BODY><P>Have you tried configuring a NAT rule?</P></BODY></HTML> Tue, 18 Dec 2018 04:10:50 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16840#M535 PhoneBoy 2018-12-18T04:10:50Z Re: User Awareness - Active Directory on a Remote site https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16841#M536 <HTML><HEAD></HEAD><BODY><P>Is AD's IP part of the VPN domain ?</P></BODY></HTML> Tue, 18 Dec 2018 04:25:13 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16841#M536 HristoGrigorov 2018-12-18T04:25:13Z Re: User Awareness - Active Directory on a Remote site https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16842#M537 <HTML><HEAD></HEAD><BODY><P>Nop, don't have configured any nat rule.</P></BODY></HTML> Tue, 18 Dec 2018 11:51:43 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16842#M537 GabsOliv 2018-12-18T11:51:43Z Re: User Awareness - Active Directory on a Remote site https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16843#M538 <HTML><HEAD></HEAD><BODY><P>yes, the AD is part of the VPN domain.</P></BODY></HTML> Tue, 18 Dec 2018 12:09:14 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16843#M538 GabsOliv 2018-12-18T12:09:14Z Re: User Awareness - Active Directory on a Remote site https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16844#M539 <HTML><HEAD></HEAD><BODY><P>Have you tried this?</P><P></P><P><IMG alt="" class="image-1 jive-image j-img-original" src="https://community.checkpoint.com/legacyfs/online/checkpoint/76518_RA_internal_int.PNG" /></P></BODY></HTML> Wed, 19 Dec 2018 12:41:32 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/User-Awareness-Active-Directory-on-a-Remote-site/m-p/16844#M539 Pedro_Espindola 2018-12-19T12:41:32Z