Identity Awareness Commands

For more information about Identity Awareness Check Point Software Blade on a Security Gateway that enforces network access and audits data based on network location, the identity of the user, and the identity of the computer. Acronym: IDA., see the R81.10 Identity Awareness Administration Guide.

These terms are used in the CLI commands:

Term	Description
PDP	Identity AwarenessPolicy Decision Point. This is an Identity AwarenessSecurity Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources., which is responsible to collect and share identities.
PEP	Identity AwarenessPolicy Enforcement Point. This is an Identity AwarenessSecurity Gateway, which is responsible to enforce network access restrictions. It makes its decisions based on identity data it collected from the PDP.
ADLOG	The module responsible for the acquisition of identities of entities (users or computers) from the Active State of a Cluster Member that is fully operational: (1) In ClusterXL, this applies to the state of the Security Gateway component (2) In 3rd-party / OPSEC cluster, this applies to the state of the cluster State Synchronization mechanism. Directory. The `adlog` runs on: An Identity AwarenessSecurity Gateway, for which you enabled the AD Query Check Point clientless identity acquisition tool. It is based on Active Directory integration and it is completely transparent to the user. The technology is based on querying the Active Directory Security Event Logs and extracting the user and computer mapping to the network address from them. It is based on Windows Management Instrumentation (WMI), a standard Microsoft protocol. The Check Point Security Gateway communicates directly with the Active Directory domain controllers and does not require a separate server. No installation is necessary on the clients, or on the Active Directory server.. The AD Query serves the Identity AwarenessSoftware Blade Specific security solution (module): (1) On a Security Gateway, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities., which enforces the policy and logs identities. A Log Server Dedicated Check Point server that runs Check Point software to store and process logs.. The `adlog` logs identities. The `adlog` is the command line process used to control and monitor the ADLOG feature. The command line tool helps control users' statuses, as well as troubleshoot and monitor the system.

Term

Description

PDP

Identity AwarenessPolicy Decision Point.

This is an Identity AwarenessSecurity Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources., which is responsible to collect and share identities.

PEP

Identity AwarenessPolicy Enforcement Point.

This is an Identity AwarenessSecurity Gateway, which is responsible to enforce network access restrictions.

It makes its decisions based on identity data it collected from the PDP.

ADLOG

The module responsible for the acquisition of identities of entities (users or computers) from the Active State of a Cluster Member that is fully operational: (1) In ClusterXL, this applies to the state of the Security Gateway component (2) In 3rd-party / OPSEC cluster, this applies to the state of the cluster State Synchronization mechanism. Directory.

The adlog runs on:

An Identity AwarenessSecurity Gateway, for which you enabled the AD Query Check Point clientless identity acquisition tool. It is based on Active Directory integration and it is completely transparent to the user. The technology is based on querying the Active Directory Security Event Logs and extracting the user and computer mapping to the network address from them. It is based on Windows Management Instrumentation (WMI), a standard Microsoft protocol. The Check Point Security Gateway communicates directly with the Active Directory domain controllers and does not require a separate server. No installation is necessary on the clients, or on the Active Directory server..

The AD Query serves the Identity AwarenessSoftware Blade Specific security solution (module): (1) On a Security Gateway, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities., which enforces the policy and logs identities.
A Log Server Dedicated Check Point server that runs Check Point software to store and process logs.. The adlog logs identities.

The adlog is the command line process used to control and monitor the ADLOG feature.

The command line tool helps control users' statuses, as well as troubleshoot and monitor the system.

The PEP and PDP processes are key components of the system. Through them, administrators control user access and network protection.

Important - On Scalable Platforms (Maestro and Chassis), you must run the applicable commands in the Expert mode on the applicable Security Group.