Identity agent question

[the_rock]

Hey guys,

Just wondering, does anyone know if its possible when you first install identity agent on a machine to use that option that says "automatically discover server" instead of manually putting the IP there? I attached how IA settings are configured on gateway side, not sure if something there has to be changed?

Thanks a lot in advance.

[Vincent_Bacher]

There are several ways for server discovery. Just have a look at this
Server Discovery and Server Trust (checkpoint.com)

[the_rock]

I am wondering though, they did follow that, but last section for 

1. In Host offering this service, enter the address of the Identity Awareness Gateway.

Is that external IP of the cluster?

[Vincent_Bacher]

I assume, this is any interface where access for identity agent is allowed.