Explanation
To enable Identity Awareness:
* Log in to SmartDashboard.
* From the Network Objects tree, expand the Check Point branch.
* Double-click the Security Gateway on which to enable Identity Awareness.
* In the Software Blades section, select Identity Awareness on the Network Security tab.
The Identity Awareness Configuration wizard opens.
* Select one or more options. These options set the methods for acquiring identities of managed and unmanaged assets.
* AD Query - Lets the Security Gateway seamlessly identify Active Directory users and computers.
* Browser-Based Authentication - Sends users to a Web page to acquire identities from unidentified users. If Transparent Kerberos Authentication is configured, AD users may be identified transparently.
References:

Explanation
A client starts an LDAP session by connecting to an LDAP server, called a Directory System Agent (DSA), by default on TCP and UDP port 389, or on port 636 for LDAPS. Global Catalog is available by default on ports
3268, and 3269 for LDAPS.

Explanation
Explanation:
Site to Site VPN
The basis of Site to Site VPN is the encrypted VPN tunnel. Two Security Gateways negotiate a link and create a VPN tunnel and each tunnel can contain more than one VPN connection. One Security Gateway can maintain more than one VPN tunnel at the same time.
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92709.htm

Check Point Security Gateway and Check Point Security Management requirerunning the
First Time Configuration Wizard in order to be configured correctly. The First Time
Configuration Wizard is available in Gaia Portal and also through CLI.
To invoke the First Time Configuration Wizard through CLI, run
the config_system commandfrom the Expert shell.

AppWiki Application Classification Library
AppWiki enables application scanning and detection of more than 5,000 distinct applications and over
300,000 Web 2.0 widgets including instant messaging, social networking, video streaming, VoIP, games and more.