topic Re: adlogconfig is not supported on 1570 models in Spark Firewall (SMB)

adlogconfig is not supported on 1570 models

Elias — Thu, 06 Jul 2023 22:48:59 GMT

I want to enable NTLMv2 on my model 1570 gateway, but it doesn't accept the command:

# adlogconfig a
bash: adlogconfig: command not found

This arose from an error that appears when I run adlog to dc
bad credentials or firewall blocks DCOM traffic

Note: https://support.checkpoint.com/results/sk/sk91462

This command is not compatible with these devices or is there another way to enable it?

Regards

Re: adlogconfig is not supported on 1570 models

Chris_Atkinson — Thu, 06 Jul 2023 23:27:05 GMT

From the WebUI in Advanced Settings do you have the following option available?

"User Awareness - Use NTLMv2 protocol for Active Directory Queries"

Re: adlogconfig is not supported on 1570 models

Elias — Mon, 10 Jul 2023 14:14:52 GMT

That option does not appear, it is a 1570 model with version

R80.20.15 (992001653)

Re: adlogconfig is not supported on 1570 models

the_rock — Mon, 10 Jul 2023 14:31:57 GMT

You can confirm 100% with TAC, but I dont see it there either.

Andy

Re: adlogconfig is not supported on 1570 models

Chris_Atkinson — Tue, 11 Jul 2023 00:37:23 GMT

Per sk159772 you need to upgrade to R80.20.35 or later for NTLMv2 support preferably R81.10.x

Re: adlogconfig is not supported on 1570 models

the_rock — Mon, 10 Jul 2023 14:51:32 GMT

To add to what Chris said, honestly, not to sound funny now, but, when it comes to SMB appliances, your choices are limited. If you upgrade to latest version (which btw you should) and if say factory reset does not help either, there is not too much TAC can do at that point either, specially if box keeps rebooting.

According to below, HW diag tool is not even supported, so sounds like RMA would be only option left...

Andy

https://support.checkpoint.com/results/sk/sk97251

Re: adlogconfig is not supported on 1570 models

Chris_Atkinson — Tue, 11 Jul 2023 00:32:40 GMT

Sorry Andy how does that relate to the issue discussed here?

Maybe another thread: https://community.checkpoint.com/t5/SMB-Gateways-Spark/Gateway-loses-connectivity-after-installing-policies/m-p/185875#M9165

Re: adlogconfig is not supported on 1570 models

the_rock — Mon, 10 Jul 2023 15:02:08 GMT

I mentioned it just due to the fact that latest software for SMB will always be suggested, regardless of the issue. personally, Im totally okay with it, thats why I mentioned it, as its definitely a good idea for SMB appliance.

Re: adlogconfig is not supported on 1570 models

Elias — Tue, 18 Jul 2023 01:44:16 GMT

Thank you very much everyone for your comments. I managed to make everything work, I simply updated the administration console and later all the gateways managed with this, the ad query's went back to work.