- Products
- Learn
- Local User Groups
- Partners
- More
CheckMates Fifth Birthday
Celebrate with Us!
days
hours
minutes
seconds
Join the CHECKMATES Everywhere Competition
Submit your picture to win!
Check Point Proactive support
Free trial available for 90 Days!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
The 2022 MITRE Engenuity ATT&CK®
Evaluations Results Are In!
Now Available: SmartAwareness Security Training
Training Built to Educate and Engage
MITRE ATT&CK
Inside Check Point products!
CheckFlix!
All Videos In One Space
Hi Team
I have R80.10 Firewall as well as Mgmt server and its Integrated with AD. Previously Remote Access VPN users were configured locally. Later we decided to integrate with AD hence IA enabled. The issue in R80.10 is -
I need to give access to particular group from AD to Remote Access VPN.
Hence in R80.10; do I just need to configire Access Role and import it in Rule base?
If so, then Remote Access community does not support adding Acces Role and it only supports Groups.
So, in this case I need to configure Access role and put that in Group and then that group put it in RA Community?
Or do I need to use LDAP groups instead? like CN=VPN, CN=Users, CN=example, CN=com? And then put this group in RA community?
Again being R80.10 it does not support Adding Legacy User Objects like g_LDAP_Group@Any
What is the best way to implement Endpoint VPN then?
TIA
blason R
In the RA community you need the Legacy LDAP groups.
In rulebase you can use Access roles.
You could even use legacy user acces in rulebase if you are using only FW blade in your layer/policy. With unified policy, you are right, legacy user access is not supported anymore in the rulebase.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY