CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Authentication
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-03-29
WinchesterVA WinchesterVA is offline
Junior Member
 
Join Date: 2006-12-21
Posts: 17
Rep Power: 0
WinchesterVA has an average reputation (10+)
Default multiple authentication methods (SecuID, local, and TACACS)

I know it is possible to setup external authentication. I've done it for SecurID in previous versions.

But now we have a requirement for more than one type of external authentication. Both authentication by SecurID and a TACACS defined users.

We have around 200 Provider-1 admin accounts that we maintain locally.

We want to deploy SmartPortal to allow readonly access of policies and this could get into hundreds of read only accounts.

Because the authentication is mixed (TACACS for internal, SecurID for external) we need to know if it is possible to do both. And get rid of the local accounts.

I don't want to put forth the effort to try if it is a lost cause.
Reply With Quote
  #2 (permalink)  
Old 2007-04-07
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,603
Rep Power: 4
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: multiple authentication methods (SecuID, local, and TACACS)

You can do both as long as you don't need to use generic* (That can only point to one type of auth). For each user you just select the auth you want to use.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 20:17.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0