https://community.checkpoint.com/t5/General-Topics/Identity-awareness-communication/m-p/62696#M12694 <P>Does Identity awareness use communication over TLS1.0/1.1/1.2 using AES-128/256 algorithms against the Domain Controllers?</P> Fri, 13 Sep 2019 05:52:15 GMT Geomix7 2019-09-13T05:52:15Z https://community.checkpoint.com/t5/General-Topics/Identity-awareness-communication/m-p/62696#M12694 <P>Does Identity awareness use communication over TLS1.0/1.1/1.2 using AES-128/256 algorithms against the Domain Controllers?</P> Fri, 13 Sep 2019 05:52:15 GMT https://community.checkpoint.com/t5/General-Topics/Identity-awareness-communication/m-p/62696#M12694 Geomix7 2019-09-13T05:52:15Z https://community.checkpoint.com/t5/General-Topics/Identity-awareness-communication/m-p/62709#M12698 <P><SPAN>The communication is a WMI query (over DCE-RPC), registering to receive all relevant Security Event logs from the Domain Controller. (For Windows 2003 Domain Controllers, events 672,673 and 674 are fetched, while for Windows 2008 Domain Controllers events 4624, 4768, 4769 and 4770 are fetched.) </SPAN></P> <P><SPAN>See&nbsp;<A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk60301" target="_blank" rel="noopener">sk60301 - Identity Awareness AD Query</A>&nbsp;- and of course&nbsp;<A class="cp_link sc_ellipsis" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk86441&amp;partition=Advanced&amp;product=Identity" target="_blank">sk86441: <STRONG>ATRG</STRONG>: <STRONG>Identity</STRONG>Awareness</A>...</SPAN></P> Fri, 13 Sep 2019 09:34:26 GMT https://community.checkpoint.com/t5/General-Topics/Identity-awareness-communication/m-p/62709#M12698 G_W_Albrecht 2019-09-13T09:34:26Z