Checkpoint pxGrid Integration

[vibobrov]

Hi Folks,

Do we have any guides on integrating Checkpoint with pxGrid for identity awareness?

Thanks

[jonaowen]

John,

Well done for all the work that has gone into this.

I too have partners here in NZ and AUS who would and are actively seeking this integration.

I feel it is a very definitely tool for us long term, to be able to embed Cisco Security in existing security deployment and fully integrate systems.

Can we work together and achieve the documentation and verify the testing so we can get this out and published?

Please feel free to contact me.

Cheers,

Jonathan

jonathan.owen@cisco.com

System Engineer - NZ

[jeppich]

Hey Jonathan,

When i have a draft document together, i will send it out you. Currently, Checkpoint is still in the testing phase.

Thanks,

John

jeppich@cisco.com

[Tomoo Esaka]

Team,

Please send me draft of ISE checkpoint integration doc. My customer is also asking for ISE pxgrid doc for checkpoint 5600 firewall running R77.30 software.

[jeppich]

Hi,

They are still in development, please send me the names of your customers.

Thanks,

John

jeppich@cisco.com

[tpavan]

Hi,

Is this integration guide with checkpoint via PxGrid available?

Looking for TrustSec use case.

thanks

Pavan

[jeppich]

Hey Pavan,

I'm working on it, can you send me your email, and I will send it to when completed.

Thanks,

John

jeppich@cisco.com

[victoslima]

Hi John,

I have one costumer here that have ISE and we need to integrate with checkpoint to see some users information and apply rules.

Can you help me with this process? I know that the Identity Collector is the Checkpoint software that will connect into ISE using pxgrid. On Identity Collector side i need to put two .jks files and the keys of this files.

The doubt is, how can i create this .JKS files to correctly integrate ISE and checkpoint using pxgrid? I found a lot of information on community but no one specific for checkpint and the .JKS files that i created do not work as we expected.

Best regards,

Victor Souza

[jeppich]

Hey Victor,

Yup,  this also depends on how the customer has deployed ISE.  What version of IE does the customer have deployed.

It is best to setup a webex.

Let me know how your schedule looks like or Thursday 28th, and i will setup a webex.

Thanks,

John

jeppich@cisco.com

[victoslima]

Hi John,

It is a stand alone deployment on version ISE-2.2.0.470.

I have time for this all days, my timezone is GMT -3. If you prefer on Thursday 28th, let me know what time and i will confirme the schedule.

But need to be from 08:00AM to 06:00PM (GMT -3), because is my costumer work time.

Best regards,

Victor Souza

[diogo.sousa]

Hi Victor, I´m on the same situation as you months later. Could you give me some instructions for the integration? Did this really work for you?

Thanks,

Diogo Sousa

[jeppich]

Hi Diogo,

Please send me an email directly along with the customer name. Also let me know was version of ISE they are using.

Thanks,

John

jeppich@cisco.com

[Luxoft]

Hello all.

We have the same task to integrate Cisco ISE (2.2.0.470) and CheckPoint R80.10 Identity Collector.

Could someone send us the current instruction for this staff?

[jeppich]

Hey Fedor,

Please send email me a direct email.

Thanks,

john

jeppich@cisco.com

[noc0000041]

We have the same task to integrate Cisco ISE (2.1.0.474) and CheckPoint R80.10 Identity Collector.

Could someone send us the current instruction for this staff?

[jaime.pedraza]

Hi Jhon, 

I know this question is rather old but I've have looked for a Checkpoint - ISE integration and implementation guide without having a detailed doc, only general guidelines about SGTs and Machine dimensions. Do you know if there's an integration guide with the quality of Cisco's?