Introduction to Identity Awareness

Firewalls traditionally monitor traffic based on IP addresses, without recognizing the user or device identities linked to those addresses. Identity Awareness Check Point Software Blade on a Security Gateway that enforces network access and audits data based on network location, the identity of the user, and the identity of the computer. Acronym: IDA. enables enforcement of access control policies based on user and device identities for enhanced security.

Check Point provides a scalable solution for both Active Directory and non-Active Directory networks, supporting employees and guest users.

The solution identifies users and devices using the source and destination IP addresses of network traffic. These identities can be used in the Source and Destination fields of Access Control policy rules:

User or user group identities
Computer or computer group identities

Identity Awareness retrieves identities from configured identity sources. At least one Identity Source must be enabled and configured in the Identity Awareness Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. object. Refer to Identity Sources for configuration details.

To start working with Identity Clients, see Getting Started with Identity Clients.

Known Limitations

Identity Awareness does not support NAT.
Identity Collector Check Point dedicated client agent installed on Windows Servers in your network. Identity Collector collects information about identities and their associated IP addresses and sends it to the Check Point Security Gateways for identity enforcement, you can download the Identity Collector package from the Support Center. can communicate with up to 35 Active Directory servers.
Identity Collector can process up to 1900 Active Directory events per second.
For an Identity Agent Check Point dedicated client agent installed on Windows-based user endpoint computers. This Identity Agent acquires and reports identities to the Check Point Identity Awareness Security Gateway. The administrator configures the Identity Agents (not the end users). There are two types of Identity Agents - Full and Light. You can download the Full and Light Identity Agent package from the Captive Portal - 'https://<Gateway_IP_Address>/connect' or from Support Center. or Identity Collector that uses a centralized Infinity Identity Provider as an identity source, you must select All Gateway's Directories under Identity Sources > Authentication settings > User Directories in SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on.. Selecting a specific Infinity Identity Provider object is not supported.