topic Re: Identity Agent Distributed Configuration Tool - The server is not Reachable in General Topics

Identity Agent Distributed Configuration Tool - The server is not Reachable

George_Sas — Wed, 14 Jan 2026 13:50:09 GMT

Hi guys.

after fighting a bit to find this Identity Agent Distributed Configuration Tool ( "C:\Program Files (x86)\CheckPoint\Identity Agent\IdentityAgent.exe" -adtool) and fetching fingerprint for my main gateway I run into another issue.

If I try to get the fingerprint for the other branch firewalls I get this error :
---------------------------
Gateway Trust Configuration
---------------------------
The server is not reachable, please check the specified address.
---------------------------
OK
---------------------------

I can reach the gateway just fine by 443 and ssh and all the other ports I need.... but can't seem to fetch them with this tool to get the fingerprint.
The main cluster I can fetch the fingerprint and all ok, but not the branches.

Any idea ?

Re: Identity Agent Distributed Configuration Tool - The server is not Reachable

Vincent_Bacher — Wed, 14 Jan 2026 14:40:42 GMT

We have been using Identity Agent for years, but unfortunately I have never used the tool and I have Zscaler Client Connector installed on the client I am currently working on, so I cannot reproduce this. Can you see a connection request from your client to the outside via Wireshark? I'm not sure if it's really 443/tcp, but it should be.
If so, do you see a reset response from the server or nothing coming back at all? Is the branch gateway already configured for Identity Agent? Does entering the GW directly as a server in Identity Agent work, do you get a connection?

Re: Identity Agent Distributed Configuration Tool - The server is not Reachable

George_Sas — Wed, 14 Jan 2026 15:17:32 GMT

1. I did not tried a wireshark yet , but I guess I will do that tomorrow.
2. All branch offices GW's are configured for Identity Agents.
3. If I manually put the specific GW in the agent configuration I can connet to it just fine.

I need to add the gateways and fingerprints as when I tested using "_srv" records , some clinets connected to branch offices gateways and got certificate warning as I am using wildcard.