156-215.80 · Question #249
Where do you verify that UserDirectory is enabled?
The correct answer is D. Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security. In Check Point R77, enabling UserDirectory (LDAP) is a global setting applied to all managed Security Gateways, not a per-gateway property.
Question
Where do you verify that UserDirectory is enabled?
Options
- AVerify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP)
- BVerify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways
- CVerify that Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory
- DVerify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security
How the community answered
(20 responses)- B5% (1)
- C5% (1)
- D90% (18)
Why each option
In Check Point R77, enabling UserDirectory (LDAP) is a global setting applied to all managed Security Gateways, not a per-gateway property.
The Authentication tab under Security Gateway General Properties controls per-gateway authentication schemes but does not contain the UserDirectory enable toggle.
Global Properties > Authentication covers general authentication timeout and session settings, not the UserDirectory (LDAP) feature enablement.
Security Gateway > General Properties does not have a UserDirectory (LDAP) sub-section; this feature is not configurable at the individual gateway level.
UserDirectory is enabled under Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways, which is the correct location in SmartDashboard. This global setting tells the Security Management Server to use the configured LDAP server for user authentication across all managed gateways, rather than the local user database.
Concept tested: Check Point UserDirectory LDAP global properties configuration
Source: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN1_AdminGuide/html_frameset.htm
Topics
Community Discussion
No community discussion yet for this question.