topic Re: Identity Collector - Gateway Connectivity issue in Firewall and Security Management

Identity Collector - Gateway Connectivity issue

Thezo — Thu, 15 Jul 2021 15:50:24 GMT

Hello,

Identity collector is currently not connecting to Gateway in R80.20.

sk113021 is refered.

But when I check on logs (attached picture), there is connexion between IDC and Gateway, Identity collector try to initiate HTTPS to Gateway, but the gateway is not responding in HTTPS.

Re: Identity Collector - Gateway Connectivity issue

PhoneBoy — Thu, 15 Jul 2021 15:54:23 GMT

Is Identity Collector enabled as an Identity Source in the relevant gateway object?

Re: Identity Collector - Gateway Connectivity issue

Thezo — Tue, 20 Jul 2021 12:36:42 GMT

Yes Identity Collector is activated as an identity source, and the identity collector is defined in authorized clients with client secret. I have updated the GW with the latest cumlative Jumbo fix Take 202 in R80.20 but same result.

Re: Identity Collector - Gateway Connectivity issue

Thezo — Tue, 20 Jul 2021 14:47:30 GMT

Hello, I solved the issue by using PKI certificate (imported in PKCS12) instead of using default self signed (certificate that was valid). To share the workaround :
- On gateway seetings

then

- Plateform portal

- Certificate - Import

- Import a PKCS12 from PKI and enter the password

- Push the policy

- Re-edit the gateway on identity Collector and trust the certificate

- Save the gateway parameters on Identity Collector and the connexion is successfully established.

Re: Identity Collector - Gateway Connectivity issue

simo94 — Mon, 17 Oct 2022 10:22:53 GMT

I have a test environment and I want to it use there. is that possible ? could you please instruct on how you created that certificate ?

thank you very much.