{"id":33222,"date":"2019-10-31T21:51:25","date_gmt":"2019-10-31T18:51:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/10-check-point-getting-started-r80-20-identity-awareness\/"},"modified":"2019-10-31T21:51:25","modified_gmt":"2019-10-31T18:51:25","slug":"10-check-point-getting-started-r80-20-identity-awareness","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","title":{"rendered":"10. Check Point Getting Started R80.20. Identity Awareness","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"10.
\n
\nWelcome to the anniversary \u2014 the 10th lesson. Today, we will talk about another Check Point blade \u2014 Identity Awareness<\/b>. At the very beginning, when describing the NGFW, we determined that it is essential to regulate access based on accounts rather than IP addresses. This necessity arises primarily from the increased mobility of users and the widespread adoption of the BYOD \u2014 bring your own device model. A company may have numerous people connecting via WiFi, obtaining dynamic IPs, and from different network segments. Good luck creating access lists based on IPs. Here, user identification becomes indispensable. And the Identity Awareness blade will assist us in this matter.<\/a><\/noindex><\/p>\n

But first, let's understand what user identification is most commonly used for.<\/p>\n

    \n
  1. To restrict network access based on user accounts rather than IP addresses. Access can be regulated not only to the Internet but also to any other network segments, such as DMZ.<\/li>\n
  2. Access based on VPN<\/a>. It is much more convenient for a user to use their domain account for authentication than to come up with another password.<\/li>\n
  3. To manage Check Point, an account is also necessary, which can have various permissions.<\/li>\n
  4. And the most pleasant part \u2014 Reporting. It's much nicer to see specific users in reports, not just their IP addresses.<\/li>\n<\/ol>\n

    \nAt the same time, Check Point supports two types of accounts:<\/p>\n