> Source: [sk129392](https://support.checkpoint.com/results/sk/sk129392)

# sk129392 - Identity Sharing is active on the PEP when not configured

| Property | Value |
|----------|-------|
| Solution ID | sk129392 |
| Date Created | 2018-07-22 |
| Last Modified | 2019-05-13 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * Enforcement issues on specific networks / missing identities on enforcement points (PEP).
* The PEP Security Gateway opens a connection to other Security Gateways which are not configured to share identities with it.  
  The user can verify this by running the following command on the PEP:  
  *#netstat -apn \| grep 28581*   

  Example of output:  
  tcp 0 0 **\&ltLOCAL_PEP_IP\>** :34634 **\&ltPDP IP\>**:28581 ESTABLISHED 6138/pepd

  Look for connections established by local pepd on port 28581 to remote Security Gateway (PDP) which is NOT sharing identities to this PEP Security Gateway.  
* Running the following command and looking for remote Security Gateway (PDP) shows that it is NOT sharing identities to this PEP Security Gateway.  
  *#pep show network pdp*

  <br />

  Output example:  
  --------------------------------------------------------  
  \| Network \| Mask \| Related PDPs \|  
  --------------------------------------------------------  
  \| 10.10.10.0 \| 255.255.255.0 \| ; \|  
  --------------------------------------------------------

## Cause

In some scenarios, the PEP Gateway connects to remote Gateway PDPs not according to the Identity Sharing configuration. For example, even though sharing is not enabled on the PEP, or the PEP is not configured to fetch from a specific PDP, a connection is nevertheless made.

This will cause the PEP to try to fetch identities and perform network registrations which could lead to enforcement issues on those networks.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content