Symantec Privileged Access Management

  • Private Community

  • 1.  To Provision CHeckPoint R77 device in CA PAM

    Posted Jul 04, 2018 05:04 PM

    Hello, it Is possible to provision Checkpoint R77 device via ssh o telnet in CA PAM?

     

    Thank You!!!



  • 2.  Re: To Provision CHeckPoint R77 device in CA PAM

    Posted Jul 04, 2018 10:00 PM

    Hi,

     

    If it supports SSH then you should be able to register it as a generic unix device and configure the Access Method or Service to connect.

     

    Is it something you already explored and find issues?

    If so, can you share what issue you are encountering?

     

    Kim



  • 3.  Re: To Provision CHeckPoint R77 device in CA PAM

    Posted Jul 05, 2018 10:18 AM

    Hello,

     

    This question is a concern of customer before to register that kind of device. The customer would like to know if this kind of device is compatibble with CA PAM.

     

    Thank You.

     

    Adolfo.



  • 4.  Re: To Provision CHeckPoint R77 device in CA PAM

    Broadcom Employee
    Posted Jul 05, 2018 10:37 AM

    Hello Adolfo, Our platform support matrix, https://support.ca.com/phpdocs/7/9526/9526-PAM-platformsupportmatrix.pdf, includes the following in section 2.3 for session and credential management platform support:

     

    Devices with *nix Operating Systems using SSHv2 connection

     

    Are you talking about CheckPoint R77 running on Gaia OS? This should meet the requirement above.



  • 5.  Re: To Provision CHeckPoint R77 device in CA PAM

    Posted Jul 05, 2018 10:56 AM

    Hello Ralf,

     

    Yes, this Checkpoint device running on Gaia OS version R77.30. But, the support matrix show the compatibility with NIX OS, but as well is compatible with GAIA?

     

    Thank You..

    Adolfo.



  • 6.  Re: To Provision CHeckPoint R77 device in CA PAM
    Best Answer

    Broadcom Employee
    Posted Jul 05, 2018 12:41 PM

    Hi Adolfo, From what I read Gaia OS is a customized version of RHEL. If it allows SSH access PAM should be able to integrate with it.