Checkpoint Identity Collector User Groups

[OrkhanRustamli]

Hi All,

We are using Identity Collector to query identity information from ISE via pxGrid and send to gateway and everything is okay. The question is how can I create policies with Access Role using the identities. I didn`t find any place where to configure user groups which are related to ISE groups and attach them to Access Role.

BR,

Orkhan

[PhoneBoy]

We generally acquire groups via LDAP.
With Cisco ISE in particular, this is done with Identity Tags.
Create an Identity Tag with the same name as the relevant Cisco ISR group and use that in the relevant Access Role.

[OrkhanRustamli]

Hello,

Thanks a lot for your reply. Can you please refer any document which shows full guide to accomplish this.

[G_W_Albrecht]

Identity Awareness R80.40 Administration Guide