Prohibit/Block Identity Agent traffic on connected networks/interfaces.

[i_alves]

Hello Check Matters,

Is it possible to prohibit or block the Identity Agent from traveling over specific connected networks?

Apparently it is possible using the "According to the Firewall policy" option, shown in the figure attached to the post.

Can anyone help me with this question, please? Because I didn't find documentation specifying the use of According to the Firewall Policy.

IAlves

[Tobias_Moritz]

There are two options, I think:

1. "According to the Firewall policy" and configuring firewall rules on the gateway which is running the PDP role, controlling connections to tcp port 443 of the respectives gateway interface. Please take care of other portals running on this gateway on that port.
2. Allow the connection of agents, but limits its usefullness by configuring the network setting of your access roles accordingly.