topic Identity Awareness, PDP amount of user identities limits in Firewall and Security Management

Identity Awareness, PDP amount of user identities limits

SerB — Thu, 27 May 2021 09:22:42 GMT

Hello,

Does anyone know are there any limits on how many user identities one PDP cluster can handle?

IDC -> PDP (ClusterXL R80.40 or R81) -> PEP

Re: Identity Awareness, PDP amount of user identities limits

Vincent_Bacher — Thu, 27 May 2021 11:21:17 GMT

Hi,

In R80.10, Identity Awareness supports up to 200,000 identities per gateway. (I assume it has not been changed in R80.40 or R81)

Default is 30.000. There are two kernel values to be modified to increase the tables:

ia_max_authenticated_users -> for pdp tables
ia_max_enforced_identities -> for pep tables

(to be modified by guidebedit on the cluster object)

Cheers
Vincent

Re: Identity Awareness, PDP amount of user identities limits

G_W_Albrecht — Thu, 27 May 2021 12:24:33 GMT