adlog control

Description

Sends control commands to the AD QueryClosed Check Point clientless identity acquisition tool. It is based on Active Directory integration and it is completely transparent to the user. The technology is based on querying the Active Directory Security Event Logs and extracting the user and computer mapping to the network address from them. It is based on Windows Management Instrumentation (WMI), a standard Microsoft protocol. The Check Point Security Gateway communicates directly with the Active Directory domain controllers and does not require a separate server. No installation is necessary on the clients, or on the Active Directory server..

Syntax

adlog {a | l} control

      muh <options>

      reconf

      srv_accounts <options>

      stop

Parameters

Parameter

Description

muh <options>

Manages the list of Multi-User Hosts.

The available <options> are:

  • Show all known Multi-User Hosts:

    adlog {a | l} control muh show

  • Add an IP address as a Multi-User Host:

    adlog {a | l} control muh mark

  • Removes an IP address from the list of Multi-User Hosts:

    adlog {a | l} control muh unmark

reconf

Sends a reconfiguration command to the AD Query.

Resets the policy configuration to the one defined in SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on..

srv_accounts <options>

Manages service accounts.

Service accounts are accounts that do not belong to actual users, rather they belong to services that run on a computer. Service accounts are suspected, if they are logged in more than a certain number of times.

The available <options> are:

  • Show all known service accounts:

    adlog {a | l} control srv_accounts show

  • Clear all the accounts from the list of service accounts:

    adlog {a | l} control srv_accounts clear

  • Manually update the list of service accounts:

    adlog {a | l} control srv_accounts find

  • Remove an account name from the list of service accounts:

    adlog {a | l} control srv_accounts unmark

stop

Stops the AD Query.

Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. does not acquire new identities with the AD Query anymore.