Understand some cases of Access Role better

[TronNQ]

Dear Guy!

I am configuring an Access Role for VPN Remote Access related usage.

Specifically, with Access Role there will be 4 data fields is: Networks, Users, Machines, Remote Access Clients.

Let's say I configure a Role with values.

Networks: Any

Users: User local on Checkpoint

Machines: Machine On LDAP

Remote Access Clients: Any

So if I VPN in with a user that matches the user field but the Machines are different, can I access the data according to the rule?

[_Val_]

No. In your case, you are locking access for specific machines only. Clients who can authenticate but not on those specific machines, or when their machine identity cannot be checked, will not be matched to the rule

[TronNQ]

So does that mean, if we use machines for Access then we only need specific machines only. And the other values ​​not change?

[PhoneBoy]

Correct.
Note that we only acquire identities when a user generates a login event.