Identity awareness Update frequency

Mattias_Jansson — Wed, 28 May 2025 09:06:49 GMT

Hi!

We are using AD-group based rules with Identity Awareness on our gateways with Identity Collector.

My question:
If a user is logged in and then afterwards the user is added with a new AD-group.
Do the user need to logout/login again for the new group to apply on the gateway or is this updated automatically with some frequency?

It is the Identity Role as below that needs to be updated with the new group on the gateway.

[Expert@gateway]# pep show user query usr username
Command: root->show->user->query

==================================================
Client ID : <xxx.xxx.xxx.xxx, 00000000>
Username : username
Identity Role : <ad-group-1, ad-group-2, ad-group-3>

topic Identity awareness Update frequency in Firewall and Security Management

Identity awareness Update frequency

Re: Identity awareness Update frequency