Managing Device Settings
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Centrally Managed Administration Guide|72
Configuring RADIUS
You can configure the RADIUS server (Remote Authentication Dial In User Service) that
provides authentication, authorization, and accounting for the Check Point appliance
gateways. When you configure RADIUS in the Provisioning Profile, you can configure it for all
gateways that reference this profile. The RADIUS server must already be defined as a
SmartConsole object.
You can configure your appliance to contact more than one RADIUS server. If the first server
in the list is unreachable, the next RADIUS server in the list is contacted for authentication.
To configure RADIUS settings in a Provisioning Profile:
1. Open the Security Gateway Profile window, and select the RADIUS tab.
a. Select Manage RADIUS settings centrally from this application.
b. Click Advanced.
The Profile Settings window opens.
c. Select an override profile setting:
n
Allowed
n
Denied
n
Mandatory
2. Select RADIUS is activated on device to enable RADIUS on the Check Point appliance.
3. Click Add to add RADIUS servers that were defined in SmartConsole, select a RADIUS
server from the list and click OK.
4. To remove a server, select a server in the list and click Remove.
5. Use Up and Down to set the priority to contact RADIUS servers.
6. Click Allow administrators from specific RADIUS groups only (comma separated) to
allow authentication from specified groups as defined on the RADIUS server. Only
administrators that belong to those groups can get access.
7. Click OK.
To Next Page
Loading...
