- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
Hi.
I am at a customer trying to implement Identity Collector R80.10 with Cisco ISE 2.4. I can read and know that sk108235: Identity Collector - Technical Overview says "Cisco Identity Services Engine (ISE) Servers, versions 2.0, 2.1, 2.2, 2.3 (starting from R80.10) and 2.4 (Starting from R80.20).".
Does anybody know if 2.4 is only not supported with R80.10 or if something essential changed in 2.4 so it does not work at all? No possibility to upgrade to R80.20 at the moment. Any help would be appreciated.
Maybe Royi Priov knows for sure.
Hi Oliver,
As this is agent side logic, downloading the newest Identity Collector from sk134312 should be sufficient.
The remark is there as the QA cycle was done only for R80.20 security gateway.
I will fix both SKs.
Thanks,
Royi Priov
Identity Awareness R&D.
Hi, Royi.
That is great news. Thank you very much for this information. It helps a lot.
Best regards,
Oliver
Hi Royi,
Is there official documentation form Check Point for Identity Collector integration with Cisco ISE?
Thanks,
Chamila
Hi, Chamlia.
We struggled much at our customer to get the connection between Identity Collection and ISE running. Anything we found published officially – and this was not much! – did not help in any way. Finally, we involved the diamond support of the customer and got an internal document which was pretty straight forward and helpful. I would suggest that you involve TAC. Without the internal documentation we would not have been able to connect both. It was mainly a certificate and certificate conversion issue.
Check Point should deliver proper documentation for this product and its connection to Cisco ISE. That is a kind complicated because you have to document parts that consists of ISE configuration.
Hi Oliver,
Thank you for your advice on this. I have already involved TAC. Hopefully, fingers crossed!
Kind regards,
Chamila
We found this helpful. Not official, but it helped our ISE guy figure it out:
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY