https://community.checkpoint.com/t5/Spark-Firewall-SMB/Identity-Collector-support-on-SMB-Appliances/m-p/83412#M3465 Which makes sense.<BR />The main thing is the SMB gateways don’t support the IDA API.<BR />It will accept identities shared from other gateways that were received that way. Tue, 28 Apr 2020 02:56:47 GMT PhoneBoy 2020-04-28T02:56:47Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/Identity-Collector-support-on-SMB-Appliances/m-p/83265#M3458 <P><SPAN><EM>sk123858 Identity Collector support on SMB Appliances</EM> states that there is no Identity Collector support for SMB&nbsp;</SPAN>appliances. While this limitation is true with locally managed SMBs, a GAiA GW connected to&nbsp;<SPAN>Identity Collector can share that information with centrally managed SMBs. I asked for confirmation in a feedback to sk123858:</SPAN></P> <P><SPAN>Q: <EM>As SMB GWs support Identity Sharing, is Identity Collector supported when connected to main (non-SMB) GW only and Identity Sharing between main GW and SMB is active ?</EM></SPAN></P> <P><SPAN><EM>A:&nbsp;</EM></SPAN>Identity sharing is supported in Centrally managed mode only.&nbsp;The SMB gateway is “agnostic” regarding the means of achieving identities used by the peer gateway, so it should work.</P> Mon, 27 Apr 2020 09:47:16 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Identity-Collector-support-on-SMB-Appliances/m-p/83265#M3458 G_W_Albrecht 2020-04-27T09:47:16Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/Identity-Collector-support-on-SMB-Appliances/m-p/83412#M3465 Which makes sense.<BR />The main thing is the SMB gateways don’t support the IDA API.<BR />It will accept identities shared from other gateways that were received that way. Tue, 28 Apr 2020 02:56:47 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Identity-Collector-support-on-SMB-Appliances/m-p/83412#M3465 PhoneBoy 2020-04-28T02:56:47Z