topic Re: ID Controller add Domain fail with AD Server in Chinese 中文 https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/ID-Controller-add-Domain-fail-with-AD-Server/m-p/102066#M533 <P>可以參考:</P><P>&nbsp;</P><P>sk108235<BR />Identity Collector - Technical Overview<BR /><A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk108235&amp;partition=Basic&amp;product=Identity" target="_blank">https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk108235&amp;partition=Basic&amp;product=Identity</A></P><P>&nbsp;</P><P>Identity Awareness R80.40 Administration Guide<BR />Configuring the Identity Collector to Work with Cisco ISE Server</P><P><A href="https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_IdentityAwareness_AdminGuide/Topics-IDAG/Configuring-Identity-Collector-Work-with-Cisco-ISE-Server.htm?Highlight=cisco%20ise" target="_blank">https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_IdentityAwareness_AdminGuide/Topics-IDAG/Configuring-Identity-Collector-Work-with-Cisco-ISE-Server.htm?Highlight=cisco%20ise</A></P> Sat, 14 Nov 2020 22:00:23 GMT Cyber_Serge 2020-11-14T22:00:23Z ID Controller add Domain fail with AD Server https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/ID-Controller-add-Domain-fail-with-AD-Server/m-p/96782#M530 <P>各位好</P><P>&nbsp;</P><P>最近正在測試Checkpoint整合ISE的可行性.</P><P>&nbsp;</P><P>首先第一步已經出現了問題.ID Controller不能加入Domain.</P><P>&nbsp;</P><P>在Guide里面與AD Server連接相關port口的要求經過檢查過是通的,</P><P>&nbsp;</P><P>用於連接的AD account也已經接照要求加入'Event Log Readers'群組中.</P><P>&nbsp;</P><P>可還是出現Timeout跟'unable to connect, please check connectivity with'等信息.</P><P>&nbsp;</P><P>找整天也找不到相關的解決方案.</P><P>&nbsp;</P><P>希望有各路大神提供一些建議.</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 15 Sep 2020 09:26:22 GMT https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/ID-Controller-add-Domain-fail-with-AD-Server/m-p/96782#M530 Milk_Ng 2020-09-15T09:26:22Z Re: ID Controller add Domain fail with AD Server https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/ID-Controller-add-Domain-fail-with-AD-Server/m-p/97234#M531 <P>Hello Milk,</P> <P>&nbsp;</P> <P>不好意思回覆晚了。</P> <P>不太確定你目前使用的版本，所以沒辦法給太明確的建議。</P> <P>在整合認證的部份是由管理主機來連動的，這邊會建議使用最新的管理主機版本 (目前的建議版本是R80.40)。</P> <P>另外在ISE整合的部份是透過Identity Collector進行的，這需要額外安裝，詳細的運作方法及設定你可以參考附件的White Paper文件，裡面也有一些建議的SK可以參考。</P> <P>&nbsp;</P> Tue, 22 Sep 2020 03:31:19 GMT https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/ID-Controller-add-Domain-fail-with-AD-Server/m-p/97234#M531 Sung-Lun_Yang1 2020-09-22T03:31:19Z Re: ID Controller add Domain fail with AD Server https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/ID-Controller-add-Domain-fail-with-AD-Server/m-p/102066#M533 <P>可以參考:</P><P>&nbsp;</P><P>sk108235<BR />Identity Collector - Technical Overview<BR /><A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk108235&amp;partition=Basic&amp;product=Identity" target="_blank">https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk108235&amp;partition=Basic&amp;product=Identity</A></P><P>&nbsp;</P><P>Identity Awareness R80.40 Administration Guide<BR />Configuring the Identity Collector to Work with Cisco ISE Server</P><P><A href="https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_IdentityAwareness_AdminGuide/Topics-IDAG/Configuring-Identity-Collector-Work-with-Cisco-ISE-Server.htm?Highlight=cisco%20ise" target="_blank">https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_IdentityAwareness_AdminGuide/Topics-IDAG/Configuring-Identity-Collector-Work-with-Cisco-ISE-Server.htm?Highlight=cisco%20ise</A></P> Sat, 14 Nov 2020 22:00:23 GMT https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/ID-Controller-add-Domain-fail-with-AD-Server/m-p/102066#M533 Cyber_Serge 2020-11-14T22:00:23Z