Identity Awareness Default Ports

This section shows the default ports used by Identity AwarenessClosed Check Point Software Blade on a Security Gateway that enforces network access and audits data based on network location, the identity of the user, and the identity of the computer. Acronym: IDA. features.

Feature

Port

LDAP

389

LDAP over SSL (LDAPS)

636

AD QueryClosed Check Point clientless identity acquisition tool. It is based on Active Directory integration and it is completely transparent to the user. The technology is based on querying the Active Directory Security Event Logs and extracting the user and computer mapping to the network address from them. It is based on Windows Management Instrumentation (WMI), a standard Microsoft protocol. The Check Point Security Gateway communicates directly with the Active Directory domain controllers and does not require a separate server. No installation is necessary on the clients, or on the Active Directory server.

135

Global Catalog

3268

Global Catalog over SSL

3269

Identity Awareness Gateway to AD

135, 389

AD to Identity Awareness Gateway

135

Enforcement Gateway

389

Identity Sharing Gateway to Enforcement Gateway

15105, 28581

Browser-Based AuthenticationClosed Authentication of users in Check Point Identity Awareness web portal - Captive Portal, to which users connect with their web browser to log in and authenticate.

443

Identity Agents to Enforcement Gateway

443

Terminal Servers Identity Agents to Enforcement Gateway

443

RADIUS Accounting

1813

It is possible to configure these features to different ports. For more information about Identity Awareness ports, see sk98561 and sk52421.