Re: NT User Access/ Checkpoint FW1

[Jeromie Jackson <jeromie () garrison com>]

At 11:15 PM 11/7/98 +0100, Rodney van den Oever wrote:
> > Is there any way to limit a user's internet rights through an NT login?
> > Based on what I know so far, if I've got a group of 100 users...  The only
> > way to exclude or include a user would be by using IP address?  If the
> > group of 100 is on the same hub using DHCP to assign addresses, or frequent
> > desk changes are a fact of life, the delegation of internet rights using IP
> > addresses is no longer valid.
> >
> > My question is, is there any way to assign rights through Checkpoint FW1
> > using an NT Login?

If you are using LDAP, I do believe you can configure FW-1 to query the
LDAP server.  You could then do grouping based on the groups within the
LDAP server.

Jeromie Jackson -CISSP
Garrison Technologies
760-633-1843
jeromie () garrison com
Web: http://www.garrison.com