http user auth does not work

[paolo.piombino]

I have the following problem with user authentication specifically with http
i create a rule that allow http traffic from inside network to outside with user authentication but i cannot surf because the authentication fail 3 times!
the user and password are correct and local authentication is enabled on CheckPoint.
I use SecurePlatform NGX R60

[RobertGraham]

Try resetting the user's password and re-pushing the policy.

[paolo.piombino]

done but the same result

[RobertGraham]

Is this on SPLAT? If so, are there any OS logs that show anything valuable?

What HFA is this?

Otherwise, I'd try doing a tcpdump to see what's going over the wire. Do binary output and open it up in wireshark.

[MarioL]

Things to check:
- Move authentication rule as close to the top of the rulebase as possible
- User expiration date (under "Personal")
- The group the user belongs to
- Authentication Scheme should be "Check Point Password"
- User Auth rule has source as "User group"@"Intenal Network"
- User Auth properties "Http all servers" (right click "user auth" action on the rule)

Make sure you push the policy and just to be safe, Install the user database too "Policy->Install database"