Identity Collector - Debug

How to debug Identity Collector

The Identity CollectorClosed Check Point dedicated client agent installed on Windows Servers in your network. Identity Collector collects information about identities and their associated IP addresses and sends it to the Check Point Security Gateways for identity enforcement, you can download the Identity Collector package from the Support Center. has two main components:

  1. User Interface

    The frontend of the application is responsible for the graphical user interface (GUI) and passes the communication of data to the backend (Service).

  2. Service

    Executes the IDC logic, such as establishes communication with identity sources and gateways, filtering, parsing, and more.

In most cases, the debugging should be enabled on the service side.

Note - In Windows 2016, the debugs are located in C:\Temp\

(not in C:\Windows\Temp\)

User Interface debug:

  • File location (where "X" is an index):

    C:\Windows\Temp\ia_idcgui_X.log

  • To increase the default debug level, change the registry key value to 0:

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\CheckPoint\IdentityCollector\GUILoggerLevel

Service debug:

ISE integration debug:

DMP files:

  • File location - If the Identity Collector crashes, collect the required dump files from C:\Windows\Temp\IDCLogs\

  • Each crash creates log files, which include the required information.

Database files:

  • File location:

    %PROGRAMDATA%\CheckPoint\IdentityCollector

  • For a replication, upload this folder or run Export Configuration in the Identity Collector application.