adlog

Description

Provides commands to control and monitor the AD Query Check Point clientless identity acquisition tool. It is based on Active Directory integration and it is completely transparent to the user. The technology is based on querying the Active Directory Security Event Logs and extracting the user and computer mapping to the network address from them. It is based on Windows Management Instrumentation (WMI), a standard Microsoft protocol. The Check Point Firewall with Identity Awareness enabled communicates directly with the Active Directory domain controllers and does not require a separate server. No installation is necessary on the clients, or on the Active Directory server. (formerly AD Log) process.

Syntax

• When the adlog runs on a Security Gateway, the AD Query serves the Identity Awareness Software Blade on a Check Point Firewall that enforces network access and audits data based on network location, the identity of the user, and the identity of the computer. Acronym: IDA. Software Blade Specific security solution (module): (1) On a Check Point Firewall, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities., which enforces policy and logs identities.

  In this case, the command syntax is:

  adlog a <parameter> [<option>]

• When the adlog runs on a Log Server Dedicated Check Point server that runs Check Point software to store and process logs. with Identity Logging Software Blade on a Management Server to view Identity Logs from the managed Check Point Firewalls with enabled Identity Awareness Software Blade. enabled, it logs identities.

  In this case, the command syntax is:

  adlog l <parameter> [<option>]