topic Re: R80.40 - Identity Awareness Questions in General Topics

R80.40 - Identity Awareness Questions

ProxyOps — Tue, 19 Nov 2019 22:16:30 GMT

Hello,

we are looking forward to the upcoming changes for IA in r80.40

I have two questions about the new things for IA:

1. We are currently using the Identity Broker with a special R80.10 take. How can we migrate from this special R80.10 take to r80.40 ? Will the existing Identity Broker Configuration persist with an inplace upgrade ?

2. We faced many diffrent Issues with the MUH Agent in the past and we are looking forward for the upcoming improvments. Has somebody already some insights, about the mentionend "Enhancements" and "better scaling and compatibility" features ?

Greetings

Niklas

Re: R80.40 - Identity Awareness Questions

PhoneBoy — Mon, 25 Nov 2019 02:01:44 GMT

You're probably running a customer release.
Usually it is not possible to upgrade in-place with a customer release installed.
Best to check with your local Check Point office on this.

Re: R80.40 - Identity Awareness Questions

Royi_Priov — Wed, 04 Dec 2019 09:10:20 GMT

Hi @ProxyOps ,

1. Identity Broker has some differences between the RFE version on R80.10 and the final product which will be part of R80.40.

The best way is to have manual migration together with the new administration guide, as the configuration file has some changes.

2. R80.40 will introduce new Terminal Server agent (MUH). This agent will be better scaled in both {users per agent} and {agents per PDP GW} ratio.

The user tagging will be done in a different method than source ports, which will allow us also better compatibility with 3rd party applications.

Thanks,

Royi Priov.