Identity Awareness between R80.10 and R77.30

[DPB_Point]

Hello team,

We have a large-scale deployment in R77.30, and we use Captive Portal + Identity Sharing between Security Gateways.

We are going to upgrade to R80.10 progressively. Is it possible to use Identity Sharing between Gateways with different OS Version? I mean, for example, in R80.10 gateway get identities from R77.30 gateway, or vice versa.

Thanks in advance!

[PhoneBoy]

Generally sharing identities between gateway versions is supported.

[Mark_Colatosti]

I do not seem to have issues with identity awareness and mixed R80.10 and R77.30 environment with the following conditions:  

• Identity agents deployed to workstations are newer versions designed for r80.10
• I have two dedicated checkpoint appliances version r80.10 that all identity agents connect to and these share to all firewall gateway appliances (mixed r77.30 and r80.10)
• gateways also scrape their local domain controller for user logins and share to these central identity agent r80.10 servers.

With the above said, all seems to be interoperating ok between versions.