topic Re: Identity Awareness Agnet Deployment with cluster environment but it is disconnect. in Firewall and Security Management

Identity Awareness Agnet Deployment with cluster environment but it is disconnect.

kyithuaung — Tue, 01 Jun 2021 04:44:58 GMT

Hello,

I'm going to configure Identity Awareness Agent Deployment with cluster environment but it is disconnect. I used security gateway address with cluster ip. There is no review button in the agent software and no trust box appears for certificate. When I find it in google and checkpoint group that it need identity sharing configuration. Identity Agents can be connected to only one Identity Awareness security Gateway. If no sharing is enabled it will not work with Identity Awareness security Gateway. Do I need to Identity sharing configuration? If need please share me " How to configure Identity sharing configuration and what is need?"

Re: Identity Awareness Agnet Deployment with cluster environment but it is disconnect.

PhoneBoy — Tue, 01 Jun 2021 04:56:19 GMT

Identity Sharing can be configured as described here: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_IdentityAwareness_AdminGuide/Topics-IDAG/Identity-Awareness-Config-Identity-Sharing.htm?tocpath=Identity%20Awareness%20Environment%7C_____1#Identity_Sharing

However, I don't believe this is necessary unless the cluster is sharing identities with other gateways/clusters.
Let's start with the basics: Can you telnet to the relevant IP on port 443 and get a connection?
If you cannot, then you either have a policy not configured to allow it or some other device in the network is blocking the connection.

It might also help to know versions/JHF levels of everything as well.

Re: Identity Awareness Agnet Deployment with cluster environment but it is disconnect.

kyithuaung — Tue, 01 Jun 2021 05:10:31 GMT

Hello Phone Boy,

Thanks for your reply. I have policy configure to allow is any. I can get telnet to the relevant IP and accept 443 port in log. Jumbo HotFix version is T87 and OS version is R80.40. Please give me any suggestion.

Re: Identity Awareness Agnet Deployment with cluster environment but it is disconnect.

PhoneBoy — Tue, 01 Jun 2021 05:15:08 GMT

Have you configured Identity Agent as an Identity Source in the gateway and pushed policy?
Please share a screenshot of your cluster object with the Identity Awareness settings.

Re: Identity Awareness Agnet Deployment with cluster environment but it is disconnect.

kyithuaung — Tue, 01 Jun 2021 05:49:02 GMT

Hello Phone Boy,
Please kindly see the attached file for your mentioned screenshot.