Integrity Server Cooperative Enforcement

[EAP56]

The Integrity Server has a feature that enables you to configure "Cooperative Enforcement." From my understanding, this can be used to send different policies to users that are using VPN versus users that are not connected with VPN. If my understanding is correct, and I do not need to have seperate policies is it really necessary to configure this in order to have a functional SecureClient VPN environment?

Thanks.

[chillyjim]

No its not. You can send the same policy to VPN users that you send to local users and disconnected users.

[100Mz]

Originally Posted by chillyjim

No its not. You can send the same policy to VPN users that you send to local users and disconnected users.

Hi, i'm working actually on integrity (last version) and i try to set it up in a cooperative mode with a checkpoint (NGX)

My question, in the documentation they are talking about possibility to create some user group, in the gateway entity. OK

1- I thought theses groups was the user VPN group (in the checkpoint's gui)
2 - it's mentionned that the group must be named "checkpoint"
--> I can't get it, you can not have multiple group with same name.

Could some one help me on this point ?

regards.

[betski]

1. Yes, but you still have to create the group (entity) within Integrity.
2. Same name but 1 group defined on the checkpoint server, 1 on integrity server.