Check Point Identity Awareness

Check Point Identity Awareness is an integrated software blade for Check Point Quantum and CloudGuard security gateways that binds network activity directly to individual user identities and user groups rather than static IP addresses. By contextualizing network connections with rich identity telemetry, Identity Awareness empowers enterprise security administrators to establish granular, identity-centric access control policies that enforce least privilege and simplify network security governance across dynamic environments.

The software blade employs versatile identity acquisition methods, including seamless querying of Microsoft Active Directory via AD Query, agent-based identity forwarding, captive web portals, browser authentication, RADIUS accounting, and Identity Agent software installed on user endpoints. Once acquired, identity associations are propagated across distributed security gateways using Identity Sharing mechanisms, ensuring consistent policy application across enterprise campuses, branch offices, and cloud networks. Furthermore, Identity Awareness correlates network threat events directly with usernames, drastically accelerating security operations center incident investigations.

Identity Awareness integrates natively with enterprise identity management ecosystems, including Microsoft Active Directory, LDAP, Microsoft Entra ID, Cisco ISE, and Aruba ClearPass. Primary enterprise use cases include enforcing role-based internet access policies, restricting access to sensitive database segments based on organizational roles, tracking user actions during forensic investigations, and streamlining compliance reporting for audit regimes such as PCI-DSS, SOX, and HIPAA.