You are about to integrate RSA SecurID users into the Check Point infrastructure. What kind of users are to be defined via SmartDashboard?

RSA SecurID authentication is handled externally by the RSA Authentication Manager; Check Point does not store individual user credentials. A 'generic user' object acts as a template that matches any user authenticated by the external RSA server, and placing it inside a group allows that group to be referenced in security rules. This avoids the administrative overhead of replicating every RSA user inside the Check Point user database.

Defining all users individually as internal Check Point users is unnecessary and incorrect - RSA SecurID users are authenticated by the RSA server, not by Check Point's internal database.

An LDAP Account Unit Group is used when integrating with an LDAP directory (such as Active Directory), not with RSA SecurID token-based authentication.

An 'Internal user Group' composed of internal Check Point user accounts would bypass RSA SecurID entirely and does not support token-based authentication.