Identity Awareness Commands

Introduction

These terms are used in the CLI commands:

• PDP - Identity Awareness Policy Decision Point - Identity Awareness gateway, which is responsible for collecting and sharing identities.
• PEP - Identity Awareness Policy Enforcement Point - Identity Awareness gateway, which is responsible for enforcing network access restrictions. Decisions are made according to identity data collected from the PDP.
• ADLOG - The module responsible for the acquisition of identities of entities (users or computers) from the Active Directory. adlog runs on an Identity Awareness Gateway that was enabled with AD Query, or on a Log Server.

  When it runs on an Identity Awareness Gateway, the AD Query serves the Identity Awareness Software Blade, which enforces the policy and logs identities.
  When adlog runs on a Log Server, adlog logs identities.

The PEP and PDP processes are key components of the system. Through them, administrators control user access and network protection.

The adlog is the command line process used to control and monitor the ADLOG feature. The command line tool helps control users' statuses, as well as troubleshoot and monitor the system.