Session Auth - SecureID Backend

[gparedes]

Hello, I am trying to get this Checkpoint R55 to authenticate windows users when they try and traverse port 2948 with a GUI application. In otherwords, no Secureremote, no browser -Just straight internet traffic. Not sure if this can be done but I'm also trying to get the authentication request to forward to the SecureID server. Below is what my rule looks like, any help is appreciated.

Rule (4) which states -
SRC:"all users" -to- DST:Server1 -with- Service:2948 -do- Action:"Session Auth" .

Sub-options of Session Auth:

Default...
source - intersect with database
destination - intersect with database
contact agent at: SecureID_Server

Thanks again,

Gabriel

[dbedit]

Looks good, make sure authentication is set to secureid on the gateway/users.Let us know your results!

[Yasushi Kono]

Hi,

I am RSA certified an could help you in case of problems.
Check Point is "RSA SecurID Ready", i.e. it is not necessary to install any RSA Agent Software. What you have to do is just copying the sdconf.rec from the /ace/data directory to the /var/ace directory on the SPLAT Security Gateway (or Linux, Solaris, IPSO) or %systemroot%\system32 on Windows and create an Agent Host on the RSA side ("UNIX Agent" or "NetOS Agent" as far as you install your firewall on Windows).

You should create an External User Profile and put it into a Group. That's almost all! Day to day job. Works great!

My project at the moment is the LDAP integration of Novell eDirectory into RSA Authentication Manager and finally, to integrate this environment into Check Point SVN. Not really a challenge. But few years ago, I could not imagine to acquire the appropriate knowledge to accomplish this task!

Kind regards,
Yasushi