Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
karthikrajaraj
Explorer

Checkpoint harmony connect start before logon

We are evaluating  harmony connect to connect remote users and azure cloud. We are having an Active directory server in Azure cloud. We are able to connect azure resources and connect the remote user to ad successfully through harmony connect network access. 

After the AD connection users are unable to use AD credentials as the harmony connect does not start before logon. 

Is this feasible with harmony connect or any work around available to achieve this?

 

Thanks

Karthik

0 Kudos
7 Replies
odedm
Employee
Employee

Hi Karthik,
Harmony Connect Agent need to identify the current signed in user therefore it does not seem to be feasible to connect before sign in. 
Please contact me directly to elaborate on this need.
Thanks,
Oded

karthikrajaraj
Explorer

Yes. I understand. I am trying one work around for this problem. I will let you know if it works.

0 Kudos
PhoneBoy
Admin
Admin

I know with our regular VPN client, this is possible using Machine Certificate Authentication.
See: https://community.checkpoint.com/t5/Remote-Access-VPN/How-to-Have-Remote-Access-VPN-Tunnel-Before-Us... 

0 Kudos
anstelios
Collaborator

So is machine certificate authentication an option for Harmony Connect?

I strongly believe there should be an option for pre-logon connectivity on Harmony Connect.

0 Kudos
odedm
Employee
Employee

Harmony Connect needs to identify the logged in user (not the machine).
Theoretically, multiple end users can share the same bare metal machine.
In such case, each end user should be identified, they even can be associated with different accounts in Harmony Connect.
Each identified user can be member of different AD groups (different access rules)

0 Kudos
Chris_Atkinson
Employee Employee
Employee

So to clarify you aren't using Azure AD as your IDP but normal AD hosted in Azure, is ADFS used here?

CCSM R77/R80/ELITE
0 Kudos
karthikrajaraj
Explorer

Yes. We are using normal AD since we need to configure group policy for end user computers. 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events