topic Re: Identity collector debugging in Firewall and Security Management

Identity collector debugging

the_rock — Sat, 22 Feb 2025 19:27:53 GMT

Hey guys,

Just need to verify something for an issue IM working with a customer. So, to debug IC, I know below is 100% relevant, but do we also need to do any additional debugs on the gw, such as pdp and pep debugs or below is enough? I just want to make sure we have all the needed info before opening the TAC case, thats all.

Tx!

Andy

https://sc1.checkpoint.com/documents/Identity_Awareness_Clients_Admin_Guide/Content/Topics-IA-Clients-AG/Identity-Collector-Debug.htm

Re: Identity collector debugging

Chris_Atkinson — Sun, 23 Feb 2025 01:29:06 GMT

PDP/PEP could be relevant but depends on the type of issue being observed i.e. connectivity & certificates or identities / groups not being updated, access roles not being matched etc.

But definitely gather this IDC debug a HCP and CPinfo to start.

Re: Identity collector debugging

the_rock — Sun, 23 Feb 2025 01:38:38 GMT

Thanks Chris!

Re: Identity collector debugging

Lesley — Sun, 23 Feb 2025 19:27:21 GMT

If issue is between IDC and AD, or any other source of info then IDC debug.

If you think issue is between gateway and IDC, then indeed both would help.

If you open a case with TAC they will inform exactly what you need to send. But of course you want to open a case with already the correct info so what Chris send is good cpinfo etc but you all know this already 🙂

Re: Identity collector debugging

the_rock — Sun, 23 Feb 2025 19:29:22 GMT

Thanks @Lesley . I got all the info, so will probably open a case tomorrow.

Cheers,

Andy