topic Re: SMB Identity collector support in Spark Firewall (SMB)

SMB Identity collector support

FBattistin — Mon, 27 Jun 2022 07:32:49 GMT

Hello guys,

Based to sk176148 Identity Awarness ADQuery will stop working at March 2023. Actually the SMB gateway doesn't support the identity collector (sk159772).

Is the ADQuery support in roadmap for centrally managed Gaia Embedded appliance?

There are other ways to use ADQuery in centrally managed environment with only SMB appliances (1600, 1800)?

Thank you in advance,

Francesco

Re: SMB Identity collector support

G_W_Albrecht — Mon, 27 Jun 2022 10:48:03 GMT

sk176148 Check Point response to CVE-2021-26414 - "Windows DCOM Server Security Feature Bypass"

says: To apply the Microsoft hardening and continue using AD Query and Identity Logging, you must install a hotfix.

Note for Quantum Spark appliances:
For Quantum Spark appliances with Gaia Embedded OS, the fix is available in R80.20.40 build 992002665 for 1500/1600/1800 appliances and in R77.20.87 build 990173127 for 700/1400 appliances..

Re: SMB Identity collector support

G_W_Albrecht — Mon, 27 Jun 2022 08:07:22 GMT

Embedded GAiA R81.10.xx is expected to support RADIUS 2.0.

Re: SMB Identity collector support

Chris_Atkinson — Mon, 27 Jun 2022 08:12:33 GMT

There is a build of R80.20.40 available from TAC that addresses the ADquery requirement.

Identity Collector support is otherwise expected with the future R81.10.XX release.

Re: SMB Identity collector support

FBattistin — Mon, 27 Jun 2022 09:18:27 GMT

Thank you Chris

Re: SMB Identity collector support

FBattistin — Mon, 27 Jun 2022 09:18:49 GMT

Thank you

Re: SMB Identity collector support

G_W_Albrecht — Mon, 27 Jun 2022 11:24:41 GMT

No need for TAC - you can use sk176145: R80.20.40 for Quantum Spark Appliances to download build 992002665 !

Re: SMB Identity collector support

arman1982 — Thu, 02 Feb 2023 09:35:56 GMT

Good afternoon. Sorry to disturb Installed 992002691 and windows 2022 Require Integrity Activation Authentication Level = 0. But it's still a Communication problem. There are no problems since 2019. Can you tell me what else you can do?