Managing the Access Policy
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Centrally Managed Administration Guide|225
Managing the Access Policy
This section describes how to set up and manage your Quantum Spark appliance Access
Policy.
Working with User Awareness
On the Users & Objects > User Awareness page, you can enable User Awareness if your
Security Management Server is configured to work with this feature.
The Security Management Server can connect to the Active Directory through a connected
Security Gateway.
User Awareness lets you configure the Quantum Spark Appliance to enforce Access Control
Policy on individual users and groups. Identity Tags let you include external identifiers
provided by an Identity Source in Access Role matching. These external identifiers act like a
tag that can be assigned to a specific user, device or group.
User Awareness lets you create rules for specified users in these Rule Bases:
n
Firewall
n
URL Filtering and Application Control
n
Threat Prevention
n
SSL Inspection
n
Anti-Spam
AD Query
AD Query is a clientless tool used to get user information. It extracts user and computer
information from the Active Directory Security Event Logs.
Quantum Spark appliances support AD Query as an Identity Source. For configuration
instructions, see the
Identity Awareness Administration Guide
for your version.
Identity Collector
Identity Collector is a dedicated client agent installed on Windows Servers in your network.
Identity Collector collects information about identities and their associated IP addresses, and
sends it to the Check Point Security Gateway for Identity enforcement.
Quantum Spark appliances support Identity Collector as an Identity Source in the versions
R81.10.00 and higher.
For configuration instructions, see the
Identity Awareness Clients Administration Guide
.
To Next Page
