I am working on an installation of a wireless network. To let wireless clients connect, both the user and machine have to be a part of the domain.
The user part is solved by using Radius authentication on the wireless access point. Clients can connect, and are segmented by the firewall until their machine identity is established.
To do this, I'm using Checkpoint's Identity Awareness.
There are two options for me:
1) ADQuery
2) Identity Agent
I've tried both, but ADQuery does not work since no communication with the AD is allowed until the machine identity have been established.
Do anyone know the minimum communication that would identity a machine using Identity Awareness?
With the Identity Agent, I am currently only able to establish the current username (which is the credentials typed into the login. I've configured Checkpoint to use Single-Sign-On, but the machine identity remains unknown.
The configuration for the IA is an LDAP connection to the AD.
-- DED
