Checkpoint identity collector and Cisco ISE integration

Rohit_Raut — Tue, 20 Oct 2020 10:06:23 GMT

Hi,

We are trying to integrate cisco ISE with identity collector. We can see 'certificate unknown' log in tcpdump captures. Below snapshot FYR.

where, 10.10.1.37 is identity collector server and 172.24.16.40 is cisco ISE.

Identity collector activity log

In identity collector status show 'pending for administrator approval' but we don't see a request in ISE webui. We have followed the document below.

https://community.checkpoint.com/fyrhh23835/attachments/fyrhh23835/general-topics/10644/1/Check%20Point%20and%20ISE%20Intergration%20White%20Paper.pdf

We used below default self signed certificate from ISE

Can someone, who has done it successfully, let us know the exact steps that were followed and the certificate that need to be exported from ISE? We have followed the above document for 3 times but every time we are getting the same issue.

Re: Checkpoint identity collector and Cisco ISE integration

G_W_Albrecht — Tue, 20 Oct 2020 14:23:16 GMT

Did you consult Identity Awareness R80.40 Administration Guide p.86 ? I find that very valuable, same is true of sk108235: Identity Collector - Technical Overview.

topic Checkpoint identity collector and Cisco ISE integration in Firewall and Security Management

Checkpoint identity collector and Cisco ISE integration

Re: Checkpoint identity collector and Cisco ISE integration