Use radius authentication to identify users on the logs

[AdrianJames]

Dear Everyone,

The customer is using radius to authenticate the users on their captive portal. The radius server pull the users on their Open LDAP server. I would like to know if it is possible to show the source username on the logs using radius or ldap. The version of their gateway is r80.30. 

Regards,

AJ

[Chris_Atkinson]

What is serving the Captive Portal, Check Point or something else?

Note Identity Awareness supports RADIUS accounting and Browser based authentication.

[AdrianJames]

It is someone else. They have different device serving the Captive portal. Is it okay if I could get the sk for configuring the radius accounting?

[Chris_Atkinson]

It's covered in the Identity Awareness admin guide, some further discussion was recently had on it here also: 

https://community.checkpoint.com/t5/General-Management-Topics/Identity-Awareness-question/m-p/82342

[AdrianJames]

Thank you Chris. I will check this.

[Amir_Senn]

Hey,

Try going to audit logs and use the query "Authentication method: radius" AND operation:"Log In".

Try to open one of the logs and see if there's additional information that could help you distinguish between users. If every user has different administrator that should be enough.

Tell me if this helps you.

Amir

[AdrianJames]

Thank you Amirse. I will check this as well.