Extreme Management to Checkpoint Firewall Integrations

[Matthew_Perry]

I was wondering if anyone was pulling user data from Extreme Management(NAC) into a Checkpoint appliance to Map IP to Users. Any if so how people were doing it. Also if there are any other integrations between the to systems?

[Ty_Kolff]

I just set this up with a local Checkpoint SE last week. We setup the Checkpoint as a radius server and sent accounting logs to the Checkpoint box and it was then able to tie into Active Directory and pull the user accounts mapped to an IP address.

This was for a customer that was using 802.1x authentication.

[Matthew_Perry]

Thanks, I'll poke my SE.

[Zdeněk_Pala]

Hi.

AFAIK the integration between Extreme Control and CheckPoint is very new. It does exactly what you mentioned => update IP-UserID mapping in CheckPoint.

The opposite integration is generic and should work also = if CheckPoint (anything) send the syslog with specific/configured format to the EMC then endsystem can be blacklisted => quarantined.

Please contact your local Extreme SE = You can get it from the SAI team then.

Regards

Z.