topic Re: Identity Collector redundancy in Firewall and Security Management

Identity Collector redundancy

Computacenter_A — Wed, 21 Sep 2022 07:12:31 GMT

Dear Folks,

I have running R81.10 on MDM and on the VSX cluster with IDA.

For redundancy, two Identity Collector are in use. They have identical configuration settings.

Is it possible to see in Smart Log or on the CLI via which IDC the identity was learned?

In other word, was the identity learned by IDC 1 or by IDC 2?

Best regards,

Christian

Re: Identity Collector redundancy

Sorin_Gogean — Wed, 21 Sep 2022 07:29:11 GMT

Hello ,

we have the same set-up and I can tell you that you don't see in logs differentiated like you want.

also I don't see any reason why I would be interested in that, as both IDC instances would have to be configured the same (linked to same AD servers and ISE pxGrid ) as per the CKP documents, in order to assure redundancy.

CKP Gateway, will sum up the data received from IDC A and IDC B .

ty,

Re: Identity Collector redundancy

G_W_Albrecht — Wed, 21 Sep 2022 07:31:07 GMT

sk179544: Identity-Based Access Control and Threat Prevention - Design Guidelines - Identity Collector