White Paper - Integration of Check Point Identity Collector and Cisco ISE

[_Val_]

Author

Edmund Carbon

@Edmund_Carbon 

Abstract:

The Check Point Identity Awareness Software Blade provides detailed visibility into users, groups, and machines. It provides application and access control through the creation of identity-based firewall policies in a Check Point deployment along with event monitoring and reporting. Cisco ISE integrates with Check Point’s software blade to provide real-time and comprehensive identity and network privilege context. That includes user IP address, name, group, and Cisco TrustSec® security group tag information.
This integration provides Check Point gateways with better visibility of user activities while improving control of corporate resources. ISE helps the Check Point console to display contextual information associated with an event, such as the user’s identity and level of access. This finer level of detail from ISE can reduce threats and data loss by restricting access to resources by users and devices.

This guide provides step by step instruction for establishing trust between Check Point Identity Collector and Cisco ISE Server by using self-signed certificates.

For the full list of White Papers, go here. 

[Paul_Gademsky]

Valeri,

Thank you for preparing this, I've been going round in circles with TS on trying to get this to work, and they have had no resources to get this to work.  I'll add the link to my case, and work through this (the cert part is where I've gotten stuck).

Paul G, CCSM

[Vinz129]

Hello @_Val_ 

Since release 3.1, Cisco ISE has ceased to work with pxGrid version 1.0, therefore we must use pxGrid 2.0 which is based on WebSockets.

The "CP and ISE integration White paper" was written during the time that pxGrid 1.0 was used.

I’ve had a quick look at the CP knowledge base (sk108235) and they state “For Cisco ISE PxGrid 2.0 integration Open JDK can be used.”

Do you know if the "CP and ISE integration White paper" is still valid for pxGrid 2.0 integrations ?
Any changes to the procedure/steps ?

Thanks,

Vince

[_Val_]

This is a fairly old white paper, and it may not be relevant anymore. @Edmund_Carbon can you please comment?