Identity awareness: Attention warning

[surajshinde]

Hello Team,

We are getting warning message " Identity awareness: Attention" on all the check point gateways . We have one single LDAP Account unit and  all the AD Server  are added in to same with default priority 5. In each gateways identity awareness setting we have set priorities 5 for local and 10 for central AD server and for all other set to 1001(to ignore). Both local and Central AD server pinging also we are able to fetch users from AD.

Please find attached Warning message :

How can i remove this warning?

[the_rock]

What do you see when you run adlog a dc from expert mode on the firewall?

[surajshinde]

Both Local and central AD server are showing connected . 

has connection 776

has connection 659

[Gareth_somers]

I'm pretty sure I had this at one stage and the fault was actually identity sharing related. If you check Device & License Information -> Identity Awareness -> Identity Sharing does it show any faults? In my case it was down to an intermediate firewall blocking some of the traffic between 2 gateways. I might be misremembering the error but I think it was the same.