Automatic updates from AD server on check point?

[the_rock]

Hey guys,

Does anyone know if there is an option or if its even possible if customer makes any changes on their AD server (add a user for example) that those changes get accepted on CP side right away without applying the policy? I looked at every option and cant seem to find one for this...every time customer tested new user for vpn on AD server, we had to push policy on cp side to make this work.

They are telling me they never had to do this in R77.30...current version is R80.40.

Found one setting under gw object under other -> user directory, but not sure if thats relevant or not.

[Wolfgang]

Have a look Automatic LDAP Group update is not working with Identity Collector and Access Roles not enforced when AD groups updated 

[the_rock]

Thanks Wolfgang...they dont even actually use IA blade at the moment, and exact same config worked on R77.30. TAC just responded saying this sync can take up to 1 hour...thats very strange to me, never heard anything like that before.