adlogconfig is not supported on 1570 models

[Elias]

I want to enable NTLMv2 on my model 1570 gateway, but it doesn't accept the command:

# adlogconfig a
bash: adlogconfig: command not found

This arose from an error that appears when I run adlog to dc
bad credentials or firewall blocks DCOM traffic

Note: https://support.checkpoint.com/results/sk/sk91462

This command is not compatible with these devices or is there another way to enable it?

Regards 

[Chris_Atkinson]

From the WebUI in Advanced Settings do you have the following option available?

"User Awareness - Use NTLMv2 protocol for Active Directory Queries"

[Elias]

That option does not appear, it is a 1570 model with version

R80.20.15 (992001653)

[the_rock]

You can confirm 100% with TAC, but I dont see it there either.

Andy

[Chris_Atkinson]

Per sk159772 you need to upgrade to R80.20.35 or later for NTLMv2 support preferably R81.10.x

[the_rock]

To add to what Chris said, honestly, not to sound funny now, but, when it comes to SMB appliances, your choices are limited. If you upgrade to latest version (which btw you should) and if say factory reset does not help either, there is not too much TAC can do at that point either, specially if box keeps rebooting.

According to below, HW diag tool is not even supported, so sounds like RMA would be only option left...

Andy

https://support.checkpoint.com/results/sk/sk97251

[Chris_Atkinson]

Sorry Andy how does that relate to the issue discussed here?

Maybe another thread: https://community.checkpoint.com/t5/SMB-Gateways-Spark/Gateway-loses-connectivity-after-installing-p... 

[the_rock]

I mentioned it just due to the fact that latest software for SMB will always be suggested, regardless of the issue. personally, Im totally okay with it, thats why I mentioned it, as its definitely a good idea for SMB appliance.

[Elias · Accepted solution]

Thank you very much everyone for your comments. I managed to make everything work, I simply updated the administration console and later all the gateways managed with this, the ad query's  went back to work.