Can someone in this group help me with this problem?
I have an NGx R60A CLM (aka standalone log server) running on SPLAT.
I can receive logs from the SPLAT Enforcement Module just fine. I can
log into this CLM Server with SmartView Tracker with the user account
"admin" when run "cpconfig" and also with account when I run the command
"fwm -a cisco4ng". Both of those accounts work fine.
Now I would like to authenticate users when they use Smartview
Tracker to log into the CLM via RSA SecurID. I know how to do this
with Checkpoint Provider-1. In provider-1 environment, I just have
to put the sdconf.rec into /var/ace directory, create an account and
specify SecurID as a method of authentication. After that, I run
"mdsstop;mdsstart" and I can authenticate users with SecurID when they
log into the MDG.
However, with the CLM, I can create the /var/ace directory on the CLM
box, place the sdconf.rec in the /var/ace directory, run "cprestart".
But how can I create the user to authenticate with SecurID authentication.
Remember this is a standalone CLM, therefore, the is Smartdashboard
interface for me to create user(s).
I really do not know what to do. It seems like everytime I opened a
TAC case with Checkpoint regarding SecurID, the checkpoint TAC
knowledge about checkpoint and SecurID integration is just as bad
as I am.
Has anyone successfully done this before with stand alone CLM and
RSA SecurID authentication?
TIA
cisco4ng
---------------------------------
Yahoo! Mail
Bring photos to life! New PhotoMail makes sharing a breeze.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
