topic Re: Checkpoint Identity Collector User Groups in Firewall and Security Management

Checkpoint Identity Collector User Groups

OrkhanRustamli — Fri, 09 Oct 2020 14:15:38 GMT

Hi All,

We are using Identity Collector to query identity information from ISE via pxGrid and send to gateway and everything is okay. The question is how can I create policies with Access Role using the identities. I didn`t find any place where to configure user groups which are related to ISE groups and attach them to Access Role.

BR,

Orkhan

Re: Checkpoint Identity Collector User Groups

PhoneBoy — Fri, 09 Oct 2020 17:51:06 GMT

We generally acquire groups via LDAP.
With Cisco ISE in particular, this is done with Identity Tags.
Create an Identity Tag with the same name as the relevant Cisco ISR group and use that in the relevant Access Role.

Re: Checkpoint Identity Collector User Groups

OrkhanRustamli — Mon, 12 Oct 2020 06:46:16 GMT

Hello,

Thanks a lot for your reply. Can you please refer any document which shows full guide to accomplish this.

Re: Checkpoint Identity Collector User Groups

G_W_Albrecht — Mon, 12 Oct 2020 09:34:57 GMT

Identity Awareness R80.40 Administration Guide