https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-Identity-awareness-works/m-p/76533#M11516 <P>The Identity for every user is acquired only once and then shared with all GW PEPs (<STRONG>Identity Enforcement Points)</STRONG> see:</P> <P><A class="cp_link sc_ellipsis" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk86441&amp;partition=Advanced&amp;product=Identity" target="_blank">sk86441: <STRONG>ATRG</STRONG>: Identity Awareness</A></P> Thu, 27 Feb 2020 09:30:05 GMT G_W_Albrecht 2020-02-27T09:30:05Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-Identity-awareness-works/m-p/76530#M11515 <P>Hi mates,</P><P>I have a question regarding how exactly IA works.</P><P>Every time that a packet with a certain source IP gets to the Identity aware gateway, a ldap query is sent to the AD to see if that certain source IP has a username\machine associated with it ?</P><P>If the gateway does send 1 ldap query for every packet, doesn't that create a lot of load on the network ?</P> Thu, 27 Feb 2020 09:00:16 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-Identity-awareness-works/m-p/76530#M11515 Nadav_Hellman 2020-02-27T09:00:16Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-Identity-awareness-works/m-p/76533#M11516 <P>The Identity for every user is acquired only once and then shared with all GW PEPs (<STRONG>Identity Enforcement Points)</STRONG> see:</P> <P><A class="cp_link sc_ellipsis" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk86441&amp;partition=Advanced&amp;product=Identity" target="_blank">sk86441: <STRONG>ATRG</STRONG>: Identity Awareness</A></P> Thu, 27 Feb 2020 09:30:05 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-Identity-awareness-works/m-p/76533#M11516 G_W_Albrecht 2020-02-27T09:30:05Z