Infinity Identity Architecture

[RemoteUser]

Hi Mates,

I have a question about Infinity Identity because the customer has some new requirements. We would like to move away from the traditional PDP/PEP architecture and are evaluating Infinity Identity instead.

I'd like to better understand how the product works in this scenario.

Let's assume we currently have five Smart-1 Cloud (S1C) environments, each with its own Identity Broker and Identity Collector.

If we decide to use Infinity Identity, would we need a separate Infinity Identity instance for each CMA/S1C, or would a single Infinity Identity tenant be able to serve all five environments?

Also, from a licensing perspective, would this require five separate licenses, or would a single license cover multiple CMAs/S1Cs?

Thanks in advance!

[RemoteUser]

Is it also possible to implement this with the R81.20 gateway?

[simonemantovani]

Based on the documentation, Infinity Identity requirs R82.10 gateways 

[RemoteUser]

Which one?

https://pages.checkpoint.com/infinity-identity-early-availability-program.html

Participation Requirements

To join the Infinity Identity EA program, your organization must meet the following criteria: 

• Be able to use Infinity cloud-based services
• Use Check Point security management solution like Smart-1, Smart-1 Cloud, or running on your own hardware/virtual appliances
• Update your security management to software version R82
• Have security gateways running on either R81.20 or R82
• Use a 3rd party endpoint solution such as MSFT Defender or CrowdStrike