topic Re: Identity Collector different CMAs in Firewall and Security Management

Identity Collector different CMAs

dede79 — Tue, 16 Mar 2021 11:24:29 GMT

Hello,

I have multiple CMAs but they use the same AD domains. To avoid using PDP broker (still many non R80.40 GWs) - would it be possible to use the same IA collector for gateways in different CMAs? Since the collector is not interested in CMA membership I think this should work.

Re: Identity Collector different CMAs

PhoneBoy — Thu, 18 Mar 2021 15:43:20 GMT

Good question for @Royi_Priov and his team.
Obviously this won't share state between gateways in CMAs (PDP Broker is required for that).

Re: Identity Collector different CMAs

Magnus-Holmberg — Thu, 18 Mar 2021 18:56:46 GMT

Yes it works just fine, it’s a great way to have identity’s between diff CMA.

/Magnus