https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Collector-sending-to-cluster-best-practice/m-p/63897#M12313 First option seems most reasonable and yes the information is synced. Sat, 28 Sep 2019 22:16:47 GMT PhoneBoy 2019-09-28T22:16:47Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Collector-sending-to-cluster-best-practice/m-p/63867#M12312 <P>I'm working on standing up some new Identity collector servers.&nbsp; What is the best practice for sending identity info from the IDC to the firewall cluster?&nbsp;</P><P><U>Options</U></P><P>1. Configure 1 gateway per cluster with the VIP of the cluster.&nbsp; If this is correct, does the primary member share the identity information with the secondary member?</P><P>2. Configure an entry for each member of the cluster. (eg, a 2 member cluster would have 2 gateways configured).&nbsp; This assumes that the cluster members don't automatically share identity information.</P><P>Which option is correct, or is there a different way I should configure this?</P><P>Thanks!</P> Fri, 27 Sep 2019 19:57:40 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Collector-sending-to-cluster-best-practice/m-p/63867#M12312 phlrnnr 2019-09-27T19:57:40Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Collector-sending-to-cluster-best-practice/m-p/63897#M12313 First option seems most reasonable and yes the information is synced. Sat, 28 Sep 2019 22:16:47 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Collector-sending-to-cluster-best-practice/m-p/63897#M12313 PhoneBoy 2019-09-28T22:16:47Z