Managing System Services - Infinity CHECK POINT 1100 Administration Manual

To configure remote access permissions for all users defined in Active Directory:
By default, users defined in the Active Directory are not given remote access permissions. Instead,
in the VPN > Remote Access Users page all users defined locally or in Active Directories can be
selected to be granted remote access permissions per user.
1. Click permissions for Active Directory users.
2. Select All users in the Active Directory. With this option, it is not necessary to go to the VPN >
Remote Access Users page and select specific users.
Note that most Active Directories contain a large list of users and you might not want to grant
them all remote access permissions to your organization. Usually you keep the Selected
Active Directory user groups option and configure remote access permissions through VPN >
Remote Access Users page.
3. Click Apply.
To change synchronization mode with the defined Active Directories:
1. Click Configure in the toolbar of the Active Directory table.
2. Select one of the options - Automatic synchronization or Manual synchronization. When
Manual synchronization is selected, you can sync the user database known to the appliance in
all locations that this user database can be viewed. For example, the Users & Objects > Users
page or the Source picker in the Firewall Rule Base in the Access Policy > Firewall Policy
page.
3. Click Apply.
To edit an Active Directory:
1. Select the Active Directory from the list.
2. Click Edit.
3. Make the relevant changes and click Apply.
To delete an Active Directory:
1. Select the Active Directory from the list.
2. Click Delete.
3. Click OK in the confirmation message.
The Active Directory is deleted.
Note - This page is available from the VPN and Users & Objects tabs.

Managing System Services

The Users & Objects > Services page lists the system services configured in the system. In this
page you can add new services, edit services, and delete services.
You use service objects to easily define the different network protocols. This is usually with IP
protocol and ports (used by the TCP and UDP IP protocols).
You can use these objects to define policy based routing in the Device > Routing page.
Check Point 1100/1200R/1400 Appliances Centrally Managed Administration Guide R77.20.70
Appliance Configuration
| 100