Does R80.10 Identity Collector work with Cisco ISE 2.4

[Oliver_Fink]

Hi.

I am at a customer trying to implement Identity Collector R80.10 with Cisco ISE 2.4. I can read and know that sk108235: Identity Collector - Technical Overview says "Cisco Identity Services Engine (ISE) Servers, versions 2.0, 2.1, 2.2, 2.3 (starting from R80.10) and 2.4 (Starting from R80.20).".

Does anybody know if 2.4 is only not supported with R80.10 or if something essential changed in 2.4 so it does not work at all? No possibility to upgrade to R80.20 at the moment. Any help would be appreciated.

[PhoneBoy]

Maybe Royi Priov‌ knows for sure.

[Royi_Priov]

Hi Oliver,

As this is agent side logic, downloading the newest Identity Collector from sk134312 should be sufficient.

The remark is there as the QA cycle was done only for R80.20 security gateway.

I will fix both SKs.

Thanks,

Royi Priov

Identity Awareness R&D.

[Oliver_Fink]

Hi, Royi.

That is great news. Thank you very much for this information. It helps a lot.

Best regards,

  Oliver

[Chamila_Garusi2]

Hi Royi,

Is there official documentation form Check Point for Identity Collector integration with Cisco ISE? 

Thanks,

Chamila

[Oliver_Fink]

Hi, Chamlia.

We struggled much at our customer to get the connection between Identity Collection and ISE running. Anything we found published officially – and this was not much! – did not help in any way. Finally, we involved the diamond support of the customer and got an internal document which was pretty straight forward and helpful. I would suggest that you involve TAC. Without the internal documentation we would not have been able to connect both. It was mainly a certificate and certificate conversion issue.

Check Point should deliver proper documentation for this product and its connection to Cisco ISE. That is a kind complicated because you have to document parts that consists of ISE configuration.

[Chamila_Garusi2]

Hi Oliver,

Thank you for your advice on this. I have already involved TAC. Hopefully, fingers crossed!

Kind regards,

Chamila

[phlrnnr]

We found this helpful.  Not official, but it helped our ISE guy figure it out:

https://community.checkpoint.com/t5/Access-Control-Products/Establishing-trust-based-on-signed-certi...