topic Re: CheckPoint New Identity Collector Installation and remove Old IDC in Firewall and Security Management

CheckPoint New Identity Collector Installation and remove Old IDC

EvanRaci — Mon, 05 Jun 2023 06:53:29 GMT

Hi All,

We want to add new Identity Collector (IDC) to our CheckPoint Firewalls and remove the existing user Identity Collector (IDC) from Firewalls.

The reason is the current IDC is hosted on Window 2012 and we are going to decom that Window server.

We will install new IDC on new Window Server 2022.Then will add new IDC to Firewalls. After new IDC are successfully added to Firewalls, we will remove the old one.

Any area of impact we need to check/confirm before and after we remove old IDC from Firewalls? If IDC stop working , will that affect to all user because we are using IDC information in the Firewall Policy?

How can I check if the new IDC is really working or not via CLI or GUI?

Thank you so much, help me guide on this

Re: CheckPoint New Identity Collector Installation and remove Old IDC

_Val_ — Mon, 05 Jun 2023 10:01:45 GMT

You do want to see that identities are populated properly from the new one, before fully decommissioning the old IDC

Re: CheckPoint New Identity Collector Installation and remove Old IDC

PhoneBoy — Mon, 05 Jun 2023 16:41:26 GMT

This might help you confirm things are working: https://support.checkpoint.com/results/sk/sk179064

Note that temporary interruptions with IDC should be ok since users are cached on the PDP for several hours (assuming the default configuration).