Re: [FW-1] NG FP2, Win2k AD and VPN Users

["Milliken, Larry" <lmilliken@FW1-NOSPAMUSLEC.COM>]

Title: Zpráva

Thanks for the tip!! I have 1 last question...Once I do this conversion & move my AD users over  to Checkpoint, when new users are added to the Windows AD domain do I have to perform this same procedure to 'move' them over to Checkpoint?

-----Original Message-----
From: Brozik, Vaclav [mailto:VBrozik@DNS.CZ]
Sent: Wednesday, August 14, 2002 9:31 AM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] NG FP2, Win2k AD and VPN Users

here is the guide how to configure AD and Check Point NG using LDAP

http://support.checkpoint.com/kb/docs/public/firewall1/ng/pdf/mcrsft_active_dir_cp_ng_fp2.pdf

but there is a problem with ceritficate authentication (see my e-mails)

 

                        vasek

hi;
is there's a guide how to do it ?
contrary to the original email I don't have the LDAP component.
bye
tiran.
 

-----Original Message-----
From: Lars Troen [mailto:Lars.Troen@PROXYCOM.NO]
Sent: Wednesday, August 14, 2002 8:47 AM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] NG FP2, Win2k AD and VPN Users

The easiest thing here would be to use RADIUS authentication through IAS (MS Internet Authentication Services) using only a generic* user at the firewall.

Lars

> -----Original Message-----
> From: Milliken, Larry [mailto:lmilliken@USLEC.COM]
> Sent: Tuesday, August 13, 2002 21:41
> To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> Subject: [FW-1] NG FP2, Win2k AD and VPN Users
>
>
> I have a Windows2000 Active directory environment with over 100 remote
> users(vpn)...I also have NG FP2 on a Nokia box..Is there a way to
> copy,migrate,move,paste the users from the active directory
> (LDAP) into
> Checkpoint's LDAP Account Management?..I do not want to
> create over 100
> users in Checkpoint..I would like to have the vpn users
> authenticate against
> the Win2k ActiveDirectory.
>