topic Re: PDP Gateway not sharing with New PEP Gateway in General Topics

PDP Gateway not sharing with New PEP Gateway

twillsec — Wed, 13 Dec 2023 16:46:05 GMT

Hello,

We have an existing PDP gateway (R81.10 Take 110) that is configured to share identities with other gateways. We stood up a new gateway (R81.20 Take 26) and followed the Identity Sharing Configuration Procedure to configure receiving identities.

On the new PEP gateway, running "pep show pdp all" shows the PDP gateway configured to share.

When I look at the connections table on the PDP gateway (pdp connections pep) I do not see the new PEP gateway. I do see the other/existing gateways that identities are being shared with.

Is there a step needed to get the PDP gateway to initiate the connection to the PEP gateway? We have tried pdp control sync, but that has not helped. Does the policy need to be pushed to the PDP gateway even though there has been no change to it? (It was already configured to share identities)

Appreciate any thoughts/suggestions.

Re: PDP Gateway not sharing with New PEP Gateway

Vincent_Bacher — Wed, 13 Dec 2023 20:21:19 GMT

Push policy on pdp.

Re: PDP Gateway not sharing with New PEP Gateway

the_rock — Thu, 14 Dec 2023 01:36:33 GMT

Have you tried pdp update all?

Re: PDP Gateway not sharing with New PEP Gateway

twillsec — Thu, 14 Dec 2023 13:19:54 GMT

That did the trick, thanks!

Re: PDP Gateway not sharing with New PEP Gateway

Vincent_Bacher — Thu, 14 Dec 2023 13:36:11 GMT

Sorry for my short answer. Addition: When you configure access roles for IA and assign them on a PEP, you should always push the policy on the PDP as well.

Re: PDP Gateway not sharing with New PEP Gateway

twillsec — Thu, 14 Dec 2023 13:43:20 GMT

Anything guidance for SmartPull? Our other PEPs are getting identities via Push which is working fine, but this new PEP configured with SmartPull but I am only seeing a few identities. I have read about a support ticket being required to switch from SmartPull to Push, but curious if there was something missing to get SmartPull to work as expected.