Identity Broker

Christian_Koehl — Wed, 13 Nov 2024 13:44:46 GMT

Dear Check Mates

I have a some questions regarding IDA with Broker function.

My enviornment is R81.20 with actual JHFs. The management site is an MDM and the gateway site is a VSX Gateway Cluster.

I one of the management domain is a virtuall system "ida-gateway-publisher" which collects identities. There is on other function on this gateway. This gateway is the broker-publisher.

There are seven other managment domains. In every one is a VSX gateway working as broker-subscriber.

Do I need to activate the check box für "Get identieties from Identity Broker" for the gateway "ida-gateway-publisher"?
For me the discribtion sounds like it needs only to be checked, if it as Identity Broker Subscriber.

If it must be checked, do I need a certificate and must this certificate read / imported by the "BrokerCertFetcher" command?

Any Idea / any hint's?

Many thanks and best regards,

Christian

Re: Identity Broker

PhoneBoy — Wed, 13 Nov 2024 16:22:44 GMT

As far as I know, you only need to check that box if you are actually receiving identities from Identity Broker, not publishing them.
It's also not explicitly mentioned in the documentation for configuring a publisher, though it is for a subscriber: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_IdentityAwareness_AdminGuide/Content/Topics-IDAG/Identity-Broker-Configuration.htm

topic Re: Identity Broker in Firewall and Security Management

Identity Broker

Re: Identity Broker