Active directory user base policies are not working

[yasindu]

The Active Directory user-based policies are not working in the local managed firewall, although the user groups from Active Directory are displaying correctly and syncing properly. When I apply a policy to the Active Directory user group, the rule does not work; only IP-based rules are functioning. What could be the cause of this issue? I have attached an image showing the error in the user awareness session.

[Chris_Atkinson]

Which firmware version/build is used and are you using this with the Identity Collector??

You may need to investigate the issue further with TAC note also sk105977.

[yasindu]

Hi,

Thank you for the replying. Firmware version is R81.10.10 and this firewall not using identity collector. Only apply policies from user groups in active directory.

[Dafna]

Hi,

Which version do you use?

Can you please attach screenshot of the access rule?

Thanks,

   Dafna

[yasindu]

Hi,

Thank you for replying. This is a Check Point 1570 security appliance, and the firmware version is R81.10.10. I have attached the access rules. According to the image, only the traffic matching rule number 5 is being processed; the other rules above it are being bypassed. Additionally, this firewall is not using an identity collector.

[Dafna]

Which AD server do you use? (which version)

[yasindu]

Hi,

Windows Server 2016 active directory.