How Identity awareness works ?

[Nadav_Hellman]

Hi mates,

I have a question regarding how exactly IA works.

Every time that a packet with a certain source IP gets to the Identity aware gateway, a ldap query is sent to the AD to see if that certain source IP has a username\machine associated with it ?

If the gateway does send 1 ldap query for every packet, doesn't that create a lot of load on the network ?

[G_W_Albrecht]

The Identity for every user is acquired only once and then shared with all GW PEPs (Identity Enforcement Points) see:

sk86441: ATRG: Identity Awareness