topic Re: Does R80.10 Identity Collector work with Cisco ISE 2.4 in General Topics

Does R80.10 Identity Collector work with Cisco ISE 2.4

Oliver_Fink — Mon, 17 Dec 2018 11:36:06 GMT

Hi.

I am at a customer trying to implement Identity Collector R80.10 with Cisco ISE 2.4. I can read and know that sk108235: Identity Collector - Technical Overview says "Cisco Identity Services Engine (ISE) Servers, versions 2.0, 2.1, 2.2, 2.3 (starting from R80.10) and 2.4 (Starting from R80.20).".

Does anybody know if 2.4 is only not supported with R80.10 or if something essential changed in 2.4 so it does not work at all? No possibility to upgrade to R80.20 at the moment. Any help would be appreciated.

Re: Does R80.10 Identity Collector work with Cisco ISE 2.4

PhoneBoy — Mon, 17 Dec 2018 14:43:40 GMT

Maybe Royi Priov‌ knows for sure.

Re: Does R80.10 Identity Collector work with Cisco ISE 2.4

Royi_Priov — Tue, 18 Dec 2018 07:45:51 GMT

Hi Oliver,

As this is agent side logic, downloading the newest Identity Collector from sk134312 should be sufficient.

The remark is there as the QA cycle was done only for R80.20 security gateway.

I will fix both SKs.

Thanks,

Royi Priov

Identity Awareness R&D.

Re: Does R80.10 Identity Collector work with Cisco ISE 2.4

Oliver_Fink — Tue, 18 Dec 2018 08:06:13 GMT

Hi, Royi.

That is great news. Thank you very much for this information. It helps a lot.

Best regards,

Oliver

Re: Does R80.10 Identity Collector work with Cisco ISE 2.4

Chamila_Garusi2 — Sat, 09 Mar 2019 21:29:29 GMT

Hi Royi,

Is there official documentation form Check Point for Identity Collector integration with Cisco ISE?

Thanks,

Chamila

Re: Does R80.10 Identity Collector work with Cisco ISE 2.4

Oliver_Fink — Mon, 11 Mar 2019 07:49:53 GMT

Hi, Chamlia.

We struggled much at our customer to get the connection between Identity Collection and ISE running. Anything we found published officially – and this was not much! – did not help in any way. Finally, we involved the diamond support of the customer and got an internal document which was pretty straight forward and helpful. I would suggest that you involve TAC. Without the internal documentation we would not have been able to connect both. It was mainly a certificate and certificate conversion issue.

Check Point should deliver proper documentation for this product and its connection to Cisco ISE. That is a kind complicated because you have to document parts that consists of ISE configuration.

Re: Does R80.10 Identity Collector work with Cisco ISE 2.4

Chamila_Garusi2 — Mon, 11 Mar 2019 08:46:20 GMT

Hi Oliver,

Thank you for your advice on this. I have already involved TAC. Hopefully, fingers crossed!

Kind regards,

Chamila

Re: Does R80.10 Identity Collector work with Cisco ISE 2.4

phlrnnr — Mon, 15 Apr 2019 19:58:38 GMT

We found this helpful. Not official, but it helped our ISE guy figure it out:

https://community.checkpoint.com/t5/Access-Control-Products/Establishing-trust-based-on-signed-certificates-between-Cisco/m-p/46722#M1217