About integration between my AD and checkpoint

[hakanka]

Hi,

I am newbie on checkpoint management. Please forgive me if I am wrong. I am managing 2* firewall on my city. I have an issue on one of them. 

One of them has AD with windows server 2012, and there is no issue after changing firewall group on user firewall groups at AD. But, other firewall has AD with windows server 2008 and after I change firewall group of one user, the info is coming very delayed.(half hour, an hour or more-if location is MPLS-) so we can not react quickly when we need changes on fw groups. 

What do you suggest to me ? 

Thank you for incoming answer. 

[PhoneBoy]

Need more information about our configuration.
Starting with: gateway and management version with jumbo hotfix level.
Also which method of Identity Awareness you're using (ADQuery, Identity Agent, etc).

[hakanka]

management:Version: R80.20 OS: Gaia Kernel Version: 3.10
gateways:Version: R80.20 OS: Gaia Kernel Version: 2.6


also We use Identity Collector

[Yatiraj_Panchal]

Hi,

Is Connectivity fine between CheckPoint and AD server, please first make sure about the connectivity and latency between the both then check further troubleshoot. 

[hakanka]

there is no problem with connectivity.

[PhoneBoy · Accepted solution]

Recommend doing some of the steps here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
If it's not clear from the commands what is happening, engage with the TAC.