SmartConsole Web Access / AD Integration

[Perry_McGrew]

We are at R81 JHF29

I followed sk145392 and have my Network Techs access using SmartConsole client controlled by AD which gives them Read  / Write access.    I'd like to have my Help Desk staff be able to access the Logs to triage end user calls complaining not being able to access internet sites etc.   I set up another AD  OU and placed their ID is this OU which I defined as Read Only.   

I wanted to use the https://<MGT_IP/smartconsole for the Help Desk staff rather than having to deploy SmartConsole client.   But I am finding the only way that ANY staff can access it using a browser is if the ID is defined as a Local ID on the Mgt Server Administrators & Users section.  I don't want to define and manage users locally on any of the FW servers.   

I do not want to create a single generic ID for since the Mgt Server is NAT'd to support after-hours / on-call.

Any ideas or is this a future enhancement?

Thx-- 

[PhoneBoy]

If you want access to the logs: https://mgmt-up/smartview
I think in either case it’s limited to locally defined users, and yes, planned for future releases.

[Perry_McGrew]

Thanks. I was afraid of this. Seems to be something that should be relatively easy to accommodate since product already can talk to AD / Radius. 

I presume this is also the case to allow access to the Gaia WebUI  -- the person(s) need to be defined on the devices as a LOCAL user and given R/W, RO or SuperUser access?

Thx 

[PhoneBoy]

For Gaia WebUI, you can use RADIUS users there.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...