https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Identity-Agent-Disable-While-Off-Network/m-p/69553#M11998 <P>My company is trying to deploy Checkpoint Identity Agents with as little nuisance to users as possible. So far, I've been able to preconfigure trusted gateways with the right registry settings so that users won't really know the agent is even running, but when users take mobile devices off our network, they run into issues because the portal is not publically available.&nbsp;</P><P>Using the distributed configuration tool, I know it is possible to configure agents to connect to specific gateway devices based off IP and domain. My question is it able to configure the agents to try not to connect when on a specific network or off a domain? The idea being that we don't want users calling our help desk when the identity agent alerts the user about not being able to connect to a gateway.&nbsp;</P> Fri, 06 Dec 2019 18:27:38 GMT Steven_Lucas 2019-12-06T18:27:38Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Identity-Agent-Disable-While-Off-Network/m-p/69553#M11998 <P>My company is trying to deploy Checkpoint Identity Agents with as little nuisance to users as possible. So far, I've been able to preconfigure trusted gateways with the right registry settings so that users won't really know the agent is even running, but when users take mobile devices off our network, they run into issues because the portal is not publically available.&nbsp;</P><P>Using the distributed configuration tool, I know it is possible to configure agents to connect to specific gateway devices based off IP and domain. My question is it able to configure the agents to try not to connect when on a specific network or off a domain? The idea being that we don't want users calling our help desk when the identity agent alerts the user about not being able to connect to a gateway.&nbsp;</P> Fri, 06 Dec 2019 18:27:38 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Identity-Agent-Disable-While-Off-Network/m-p/69553#M11998 Steven_Lucas 2019-12-06T18:27:38Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Identity-Agent-Disable-While-Off-Network/m-p/69566#M11999 <P>Not sure this is possible but&nbsp;<a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/8232">@Royi_Priov</a>&nbsp;should be able to confirm.</P> Fri, 06 Dec 2019 22:20:26 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Identity-Agent-Disable-While-Off-Network/m-p/69566#M11999 PhoneBoy 2019-12-06T22:20:26Z