Fill in the blank: Authentication rules are defined for ____________.

Check Point's authentication policy engine is designed around user groups, enabling administrators to assign authentication requirements to collections of users defined in the internal database or an external directory such as Active Directory. This group-based model provides scalable and manageable policy enforcement without the overhead of per-user rules.

UserCheck is a notification and interaction mechanism that informs users about policy decisions at the endpoint, not the entity scope for which authentication rules are defined.

Authentication rules are not defined for individual users because managing per-user rules is not scalable and is not how Check Point's authentication policy engine is structured.

Authentication rules are not applied globally to all users in the database - they are applied selectively to specific user groups based on the defined security policy.