topic Re: Identity Collector Requirements (Java) in Firewall and Security Management

Identity Collector Requirements (Java)

David_C1 — Wed, 29 Apr 2020 19:29:22 GMT

I recently downloaded and installed the latest Identity Collector agent. I am successfully collecting data from our AD servers. I am a bit confused as to the requirements. SK108235 lists the following:

Windows Server 2008, Windows Server 2012, Windows Server 2012 R2, Windows 2016 (starting from R80.10) and Windows 2019 (starting from R80.40).
Has connectivity to the AD domain controllers of the organization using DNS, LDAP and DCOM
It is also possible to install the Identity Collector directly on one of the Domain Controllers.
If any Firewall software is installed on the Domain Controllers (including Windows Firewall),
then make sure that the rules allow DNS, LDAP and DCOM traffic from the machine, on which the Identity Collector is installed.
With Windows Firewall, add the following "Allow" rule: "Remote Event Log Management" --> "Remote Event Log Management (RPC)".
Has connectivity to the Security Gateway over TCP port 443.
Administrator account is required for Identity Collector installation and for running Identity Collector UI process.
Has .NET framework (version 4) installed.
At least 8 GB of RAM.
At least 10 GB of free disk space.
Oracle Java JRE 1.8 (Java SE Runtime Environment 8).

I do not have Java installed on the server on which I installed the Identity Collector (at least I can't find it). Is Java only required if acquiring identities from certain sources (e.g. not AD)? Or did this change with the latest release (which would be a Good Thing)?

Thanks,

Dave

Re: Identity Collector Requirements (Java)

PhoneBoy — Fri, 01 May 2020 05:04:15 GMT

It's the first I've heard of JRE being required for Identity Collector.
Is it working without JRE installed?

Re: Identity Collector Requirements (Java)

Nik_Bloemers — Fri, 01 May 2020 08:03:42 GMT

This requirement has been on the sk page for as long as I can remember (at the very least a year). We have it installed on our Collectors since it's clearly listed as a requirement, but we never tested it without Java.

Re: Identity Collector Requirements (Java)

David_C1 — Fri, 01 May 2020 11:46:29 GMT

It is working without Java. I am only using it to collect identities from Active Directory.

Dave

Re: Identity Collector Requirements (Java)

Vladimir — Fri, 01 May 2020 17:42:21 GMT

Yeah, it is listed as a prerequisite and has been for a while.

Re: Identity Collector Requirements (Java)

David_C1 — Sat, 02 May 2020 16:08:24 GMT

I opened a support case (6-0001989489) about this question. Answer:

"Java is only required for Cisco ISE configuration."

Dave

Re: Identity Collector Requirements (Java)

PhoneBoy — Sun, 03 May 2020 04:53:02 GMT

Not sure why it's required there, but ok, mystery resolved.

Re: Identity Collector Requirements (Java)

Royi_Priov — Sun, 03 May 2020 11:31:32 GMT

Hi @David_C1 ,

Yes, that is correct.

Our extension for Cisco ISE is written in Java, and therefore Java is needed.

Working for AD / syslog / eDirectory integration will work without it.

Re: Identity Collector Requirements (Java)

Nik_Bloemers — Mon, 04 May 2020 06:57:11 GMT

Can you update the SK with this clarification?

Re: Identity Collector Requirements (Java)

Royi_Priov — Mon, 04 May 2020 07:08:26 GMT

@Nik_Bloemers wrote:
Can you update the SK with this clarification?

sure, already asked SK team to do so.