How to add a Cloudguard MiG in GCP on an Identity Collector ?

[Chris_Van_Kriek]

I suppose I cannot go about adding every instance separately in the gateways section of the Identity Collector, since,if the MiG scales out, the added gateway will not be configured on the IDC.

A certificate is also needed to be installed on the platform portal. Same question for that.

Thanks,

Chris.

[Nir_Shamir]

Hi,

this is not doable because , as you said , you need to add the GW's in the IDC agent configuration etc.

best way is to have some other single GW / Cluster as PDP and activate Identity sharing on the MIG (can be done with a script on the CME).

This way a new GW will have access to Identity DB via a different PDP.

[Chris_Van_Kriek]

Thanks for the prompt reply ! autoprov_cfg enables the IA blade, but no options to configure it. Any more docs I can find around this ?

[Nir_Shamir]

no docs for that.

you need to write a script using Mgmt API to activate it.

[Chris_Van_Kriek]

I see. Can it be done with Terraform and CME API too ? 

[Nir_Shamir]

I am not sure. I don't see it in CME API and terraform is just used to deploy the instances.