We have a 2 node ISE 3.1.0 patch 4 deployment in a Checkpoint firewall/VPN environment and are investigating what requirements are to use the ISE to authenticate and authorize the Checkpoint VPN users.
1. Can the ISE be configured to do VPN access with Checkpoint in a similar way that you can with Cisco Firewalls and Anyconnect?
2. Do you need pxGrid to be able to do ISE to Checkpoint VPN integration?
3. Is it possible to do Profiling and/or Posture with Checkpoint VPN?
The only ISE to Checkpoint integration information we have been able to find thus far has been with Checkpoint Identity Collector, but could not find anything specific to just the VPN.
Any guidance will be greatly appreciated.
