topic Identity Awareness Sharing in another Management in Firewall and Security Management

Identity Awareness Sharing in another Management

ShadowNif — Fri, 13 Jun 2025 08:24:27 GMT

Hello,

i am facing an issue and trying to solve it. I have on my productive environment an Identity Awareness Cluster. Although, I am building a Test environment (new FWs and new Management, Different NETWORK, but they can communicate). Now I want to get the ID's from the productive environment to the Test.
How can i make my IA Cluster as ID Source on the Test env. ? Obviously, i can add the Productive IA Cluster as a Cluster in my Test to activate "Identity Sharing > Get Identities from other Gateway" . But I was thinking about API, like to make AI Cluster as API and add it as a "Identity Web API" to the Test FW.

OR is there any other way to Autoscale the ID's between different environments?

Re: Identity Awareness Sharing in another Management

PhoneBoy — Fri, 13 Jun 2025 13:41:26 GMT

To share identities across environments, use Identity Broker.
See: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_IdentityAwareness_AdminGuide/Content/Topics-IDAG/Identity-Broker-Configuration.htm

Re: Identity Awareness Sharing in another Management

Royi_Priov — Fri, 13 Jun 2025 16:49:11 GMT

Hi @ShadowNif ,

In addition to PhoneBoy's suggestion, you can also consider Infinity Identity.

See more here:

https://community.checkpoint.com/t5/General-Topics/Simplifying-Zero-Trust-with-Infinity-Identity-Centralized/m-p/246632#M41214

Re: Identity Awareness Sharing in another Management

the_rock — Sat, 14 Jun 2025 19:01:27 GMT

Definitely the identity broker is your answer.

Andy