> Source: [sk134312](https://support.checkpoint.com/results/sk/sk134312)
# sk134312 - Identity Awareness Clients
| Property | Value |
|----------|-------|
| Solution ID | sk134312 |
| Date Created | 2018-10-16 |
| Last Modified | 2026-06-25 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
## Solution
**Table of Contents:**
* Identity Awareness Clients
* Identity Collector
* Identity Agent for a User Endpoint Computer
* Identity Agent for a Terminal Server v1
* Identity Agent for a Terminal Server v2
* Installation
* General Availability Versions
* List of resolved issues per General Availability Version
* Identity Collector
* Identity Agent for Windows
* Identity Agent for macOS
* Identity Agent for a Terminal Server
* Related Documentation
Identity Awareness Clients {#Identity Awareness Clients}
--------------------------------------------------------
The Identity Awareness Software Blade offers three different agents:
* Identity Collector
* Identity Agent for a User Endpoint Computer
* Identity Agent for a Terminal Server
### Identity Collector {#Identity Collector}
> Check Point Identity Collector is a Windows-based application which collects information about identities and their associated IP addresses, and sends it to the Check Point Security Gateways for identity enforcement.
>
> The identities are collected from these sources:
>
> * Microsoft Active Directory Domain Controllers:
>
> * Windows Server 2025
> * Windows Server 2022
> * Windows Server 2019
> * Windows Server 2016
> * Windows Server 2012 R2
> * Windows Server 2012
> * Windows Server 2008 R2
> * Windows Server 2008
>
>
>
> * Cisco Identity Services Engine (ISE) Servers, versions: 2.0, 2.1, 2.2, 2.3, 2.4, 2.6, 2.7, 3.0, 3.1, 3.2, 3.3, and 3.4
>
> * Syslog messages (requires a Security Gateway R80.20 or above)
>
> * NetIQ eDirectory 8.8 (requires a Security Gateway R80.20 or above)
>
> For more information, see the [Identity Awareness Clients Administration Guide](https://sc1.checkpoint.com/documents/Identity_Awareness_Clients_Admin_Guide/Default.htm) \> Chapter "*Identity Collector*".
### Identity Agent for a User Endpoint Computer {#Identity Agent for a User Endpoint Computer}
> This is a dedicated client software that is installed on user endpoint computers.
>
> This client acquires and reports identities to the Identity Awareness Gateway.
>
> As the administrator, you, and not the users, configure this client.
>
> For more information, see the [Identity Awareness Clients Administration Guide](https://sc1.checkpoint.com/documents/Identity_Awareness_Clients_Admin_Guide/Default.htm) \> Chapter "*Identity Agent for a User Endpoint Computer*".
### Identity Agent for a Terminal Server v1 {#Identity Agent for a Terminal Server v1}
> This is a dedicated client software (version 1) that is installed on a Windows-based application server that hosts Terminal Servers, Citrix XenApp, and Citrix XenDesktop services.
>
> This client lets the system enforce Identity Awareness policies on multiple users that connect from one IP address.
>
> This functionality is necessary when an administrator must control traffic created by users of application servers that host Microsoft Terminal Servers, Citrix XenApp, and Citrix XenDesktop.
>
> For more information, see the [Identity Awareness Clients Administration Guide](https://sc1.checkpoint.com/documents/Identity_Awareness_Clients_Admin_Guide/Default.htm) \> Chapter "*Identity Agent for a Terminal Server*".
### Identity Agent for a Terminal Server v2 {#Identity Agent for a Terminal Server v2}
> This is a dedicated client software (version 2) that is installed on a Windows-based application server that hosts Terminal Servers, Citrix XenApp, and Citrix XenDesktop services.
>
> This is a new version that introduces a different approach for identifying users behind the same Terminal Server / Citrix server.
>
> It replaces the port-based user identification with tagging of user traffic used in version 1.
>
> With this approach, we are resolving the current limitation of the number of users per server (will now be 256 users per server), and compatibility issues with 3rd-party applications.
>
> This solution is supported with Security Gateway R80.40 or higher.
>
> In this new version, users are identified by login / logoff events.
>
> In addition, this version adds support for Windows Secure Boot (Windows Security feature).
>
> For more information, see the [Identity Awareness Clients Administration Guide](https://sc1.checkpoint.com/documents/Identity_Awareness_Clients_Admin_Guide/Default.htm) \> Chapter "*Identity Agent for a Terminal Server*".
Installation {#Installation}
----------------------------
> To deploy the relevant client, follow the instructions in the [Identity Awareness Clients Administration Guide](https://sc1.checkpoint.com/documents/Identity_Awareness_Clients_Admin_Guide/Default.htm) \> Chapter "*Getting Started with Identity Clients*".
>
> **Note -** The version numbers of the clients are in the format *R8X.ABC.DEF*. Do not confuse these with version numbers of Security Gateways and Security Management Servers.
General Availability Versions {#General Availability Versions}
--------------------------------------------------------------
|------------------------------------------------------------------------------------------------------------------|----------------|--------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Client Name | Client Version | Release Date | Download |
| **Identity Collector - for Windows OS** | 82.130.0000 | 19 Feb 2026 | [](https://support.checkpoint.com/results/download/74206) (MSI) |
| **Identity Agent - All flavors for Windows OS in a single package (Full, Light, v1 and v2 for Terminal Server)** | : R81.091.0000 | 25 Jun 2026 | [](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=74223) (MSI) |
| **Identity Agent Full - for Windows OS** | : R81.091.0000 | 25 Jun 2026 | [](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=74204 "Identity Agent - Full") (EXE) |
| **Identity Agent Light - for Windows OS** | : R81.091.0000 | 25 Jun 2026 | [](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=74205) (EXE) |
| **Identity Agent v1 - for a Terminal Server** | : R81.091.0000 | 25 Jun 2026 | [](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=74203) (EXE) |
| **Identity Agent v2 - for a Terminal Server** | : R81.091.0000 | 25 Jun 2026 | [](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=102539) (EXE) |
| **Identity Agent - for macOS** | R81.006.0000 | 03 Apr 2022 | [](https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=74184) (DMG) |
List of resolved issues per General Availability version {#List of resolved issues per General Availability Version}
--------------------------------------------------------------------------------------------------------------------
### Resolved Issues - Identity Collector {#Resolved Issues - Identity Collector}
Enter the string to filter this table:
|--------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ID | Changes |
| jerry_130_000 build B990053001, version 82.130.0000 (Release Date: Feb 19, 2026) ||
| AAD-9639 | Resolved an issue that caused Identity Collector not to preserve configuration of "ignore machine identities" after upgrade to version 82.129.0000. |
| jerry build B990051129, version 82.129.0000 (Release Date: Nov 6, 2025) ||
| AAD-7731 | Resolved an issue that affected the ability to ignore machine identities by configured identity source type (AD, ISE, Syslog). |
| AAD-6856 | Resolved an issue that caused Identity Collector to delay sending events to the Policy Decision Point (PDP) Identity Awareness Gateway. |
| AD-5648 | Resolved an issue that caused Identity Collector to send duplicate events to the Policy Decision Point (PDP) Identity Awareness Gateway. |
| AD-6853 | Improved inter-process communication between the Identity Collector service and the Cisco ISE Java process. |
| AD-5897 | Resolved a rare issue that caused duplicate threads to access invalid memory during repeated subscription failures to Domain Controllers. |
| - | Infinity Identity settings are displayed by default. |
| jerry build B990051126, version 82.126.0000 (Release Date: July 16, 2025) ||
| AAD-6852 | Resolved an issue that caused Identity Collector to disconnect from Infinity Identity approximately 30 minutes after startup. |
| jerry build B990051125, version R82.125.0000 (Release Date: June 29, 2025) ||
| AAD-6347 | Fixed a memory leak that caused excessive memory usage and service freezes in the Identity Collector ([sk183573](https://support.checkpoint.com/results/sk/sk183573)). |
| AAD-6236 | Fixed a race condition that could lead to duplicate thread creation and application crashes. |
| - | Added the ability to connect the Identity Collector to Infinity Identity. |
| jerry build B990051123, version R82.120.0000 (Release Date: May 11, 2025) ||
| AAD-841, AAD-839 | Added the ability to configure main IP address in case of multiple IP addresses on the external interface. |
| AAD-1857, SWSCFG-380 | Added the ability to ignore identities from specific identity sources. |
| AAD-1171 | Added support for Cisco ISE Postured events with PxGridv2. |
| AAD-5926 | Added support for Cisco ISE 3.4. |
| IDA-5888, AAD-2496 | Fixed issue with Identity Collector configuration import. |
| AAD-842, AAD-840 | Added debug prints to HTTP requests and event logging flows to enhance debugging capabilities. |
| AAD-2497, IDA-5652 , AAD-1958 | Client-side fix for PRJ-53878. |
| AAD-2428 | Stability improvement to the connection to Cisco ISE server. |
| SWSCFG-502, AAD-4988 | Stability improvements to Syslog integration. |
| AAD-1446 | Stability improvements during Identity Collector Service stop and start. |
| IDA-5661 | General improvements to Login filters. |
| AAD-579 | Fixed issue with BulkDownloader not downloading events after connectivity restore with Cisco ISE server. |
| jimmy build B990052002, version R82.002.0000 ||
| AAD-890 | Enhance process detection query for ISE extension. |
| IDA-6006 | Connectivity improvements to ISE server |
| AAD-2138 | Added support for Cisco ISE 3.2 and 3.3 |
| indigo build B990050069, version R81.069.0000 ||
| IDA-5593 | Supporting Active Directory communication with Kerberos only, instead of NTLMv2 / NTLMv1, to address potential NTLM security issues. |
| IDA-5428 | Add a "Collect Log" option for Identity Collector, under Settings \> Debugging. |
| IDA-5396 | Fix a situation where domain and device names from Cisco ISE are parsed incorrectly. |
| IDA-5312 | Fix for scenario where the connection between Identity Collector and AD is disrupted (replicated with CrowdStrike product). |
| IDA-5066 | Removing all log4j dependencies (although IDC was not vulnerable). |
| IDA-4895, IDA-5522, IDA-5521 | Fixes in automatic DC fetch and periodic DC discovery mechanisms. |
| IDA-5023 | Replace sqljet with sqlite-jdbc library for the Cisco ISE plugin. |
| IDA-5115 | Fix for "The operation could not be completed. The pipe has ended" error when stopping the Identity Collector service. |
| IDA-4979, IDA-5020, IDA-5224, IDA-3353, IDA-5552, IDA-5607, IDA-5611, IDA-5615 | Optimization and quality fixes. |
| indigo build B990050040, version R81.040.0000 ||
| IDA-4923 | Added support for Cisco ISE 3.1. |
| IDA-4915 | Added support for `isMachineAuthenticated` parameter in Cisco ISE. |
| IDA-4772 | Fixed an issue in which the Identity Collector prevents users from adding valid regular expressions in the filter dialog. |
| IDA-4894 | Added stability improvements for Active Directory as an Identity Source. |
| indigo build B990050035, version R81.035.0000 ||
| - | Added support for Windows Server 2022. |
| IDA-4713 | Added support for Cisco ISE 2.4, 2.6, 2.7, and 3.0 with pxGrid 2.0. |
| IDA-4335 | Fixed an issue in which Identity Collector disconnects randomly from Cisco ISE. |
| IDA-4671 | Added a new Check Point logo. |
| indigo build B990050028, version R81.028.0000 ||
| IDA-4088 | Fixed an issue in which Cisco ISE gets disconnected after it forwards sessions with no IP address to the Identity Collector. |
| IDA-4020 | Added performance and stability improvements. |
| IDA-4228 | Added an option to use Cisco ISE PxGrid 1.0 instead of PxGrid 2.0 (by adding registry key IsResolvePxgridVersionEnabled with value '0'). |
| indigo build B990050023, version R81.023.0000 ||
| IDA-3994 | Added capability for Identity Collector to monitor and alert the user of changes in Active Directory servers (added or removed servers) to assist maintaining an updated configuration on Identity Collector side. |
| IDA-3053 | Fixed an issue in which some login/logout events are missing when collecting identities from Syslog. |
| IDA-4079 | Fixed an issue in which end users are not matched to Access roles when collecting identities with username and machine name from Cisco ISE. |
| IDA-3878 | Fixed an issue in which users with non-English letters are not getting group updates. |
| IDA-3995 | Fixed an issue in which a "*Too many parentheses*" pop-up message appears when configuring a new Syslog Parser. |
| IDA-3955 | Fixed an issue in which the Identity Collector opens behind the taskbar when the taskbar is not on the bottom of the screen. |
| indigo build B990050018, version R81.018.0000 ||
| IDA-3670 | Added support for LDAPS for Active Directory Identity Source. For more details, see [Identity Awareness Clients Administration Guide](https://sc1.checkpoint.com/documents/Identity_Awareness_Clients_Admin_Guide/Default.htm) \> Identity Collector section. |
| IDA-3671 | Added "Group Filter" to the Identity Collector filters. The new filter enables you to filter Cisco ISE events based on the security group name. |
| indigo build B990050002, version R81.002.0000 ||
| IDA-3005 | Fixed an issue in which forwarded events are not collected by the Identity Collector. |
| h_version build B990049066, version R80.135.0000 ||
| IDA-3066 | Fixed an issue in which specific filters are not applied for Cisco ISE login events. |
| h_version build B990049061, version R80.119.0000 ||
| IDA-2927 | Changed the Debugging Severity default value to "Important" (instead of "Events") in order to reduce the log messages amount. |
| IDA-2932 | Fixed an issue in which Identity Sources are missing in the Identity Sources list after Export/Import Configuration or after editing a Domain. |
| h_version build B990049057, version R80.97.0000 ||
| IDA-2464, IDA-2534 | Stability fixes. |
| IDA-2495 | Fix a potential crash when Identity Collector got update of Group event. |
| IDA-2515 | Fix a service crash when wrong logon type arrives. |
| h_version build B990049052, version R80.87.0000 ||
| IDA-2077 | Add 'Domain translation' (alias) setting in Identity Collector GUI. This can replace creating the configuration file DomainDictionaryAliases.cfg. |
| h_version build B990049051, version R80.85.0000 ||
| IDA-2057 | Fix in Cisco ISE extension logic which sometime didn't parse username correctly. |
| IDA-2212 | Fix in AD status log with multiple Security Gateways. |
| h_version build B990049048, version R80.81.0000 ||
| IDA-2005 | Make monitoring feature \[IDA-566\] configurable - add an option to enable/disable it (off by default) and set monitoring interval. |
| h_version build B990049047, version R80.80.0000 ||
| IDA-1897 | Service crash fix. |
| PRHF-3005 | Stability issue fix. |
| h_version build B990049043, version R80.72.0000 ||
| PRHF-1797 | Fix handling of multiple domains in alias feature. |
| IDA-1666, IDA-1720 | Memory leak fixes. |
| IDA-1356 | Enhance communication channel with Security Gateways in low bandwidth conditions. |
| h_version build B990049036, version R80.67.0000 ||
| IDA-856 | Added the crs.xml file for Windows agent MSI packages, which contains the agent fixes. This file will be checked during installation to verify no content is overwritten. |
| IDA-1347 | Forwarded events with status "0x0" were not collected by Identity Collector\<. |
| IDA-1205 | Memory leak fixes |
| IDA-1065 | Limit "Login Monitor" run time according to configuration. |
| IDA-1012 | Optimization to reload data from configuration database only if required. |
| IDA-1062 | Fix for showing false associations at agent initiation. |
| IDA-769 | Fix a rare issue of loosing login events from AD. |
| IDA-977 | Added the import option for filtered users. |
| IDA-566 | Added the monitoring feature in Identity Collector. The information will be presented in CPView on the Check Point Security Gateway (requires Security Gateway R80.20 or above). |
| IDA-584 | Fixing a GUI crash in case there are no Syslog servers configured. |
| IDA-548 | Fixing a service crash in automatic DC fetch flow. |
| IDA-539 | Fixing a service crash in credentials storage flow. |
| IDA-536 | Fixing a service crash when adding a new domain from UI or when testing DC credentials. |
| IDA-543, PRHF-1249 | Service crash fixes. |
| IDA-535 | New filters mechanism - filter per Security Gateway and domain filter. |
| IDA-522 | Fixing a queue issue causing to drop associations. |
| IDA-479 | Added support in NetIQ eDirectory. |
| 02481882 | Added support in Syslog messages parsing. |
{#IdentityCollectorTable}
### Resolved Issues - Identity Agent for Windows {#Resolved Issues - Identity Agent for Windows}
Enter the string to filter this table:
|--------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ID | |
| indigo_sig build 990050089, version R81.091.0000 (Release Date: Jun 25, 2026) ||
| ----- | The only changes in this release are a new build number and a new version number. The new version number was assigned to maintain consistency with the versioning of Identity Agent for a Terminal Server. |
| indigo_sig build 990050086, version R81.087.0000 (Release Date: Jun 11, 2026) ||
| AAD-10834 | Corrected an issue where a previously announced fix (AAD-8432) was not fully integrated in the prior release. The fix is now included. |
| | Resolved a security issue (CVE-2026-10847). For more information, see [sk185052](https://support.checkpoint.com/results/sk/sk185052). |
| indigo_sig build 990050084, version R81.085.0000 (Release Date: Dec 11, 2025) ||
| | Added support for Windows 11 25H2 |
| AAD-8432 | Resolved an issue that caused the agent to not connect to the secondary Policy Decision Point (PDP) Security Gateway when connection fails to the primary PDP Gateway. |
| indigo_sig build 990050083, version R81.084.0000 (Release Date: Nov 23, 2025) ||
| AAD-6105 | In some scenarios, Kerberos authentication retries use the machine account instead of the user account |
| AAD-6191 | Improved certificate parsing of PDP certificates to detect and prefer the SAN (Subject Alternative Name) extension over the CN (Common Name) extension. |
| AAD-7796 | Resolved a cosmetic issue that caused Windows 11 clients to appear as Windows 10 in SmartConsole logs. |
| AAD-7839 | Resolved an issue that, in some scenarios, caused the *MADService.exe* process to crash when the endpoint/host computer is rebooted. |
| indigo_sig build B990050071, version R81.071.0000 ||
| AAD-6761 | Resolved an issue in the PDP discovery process. |
| indigo build B990050070, version R81.070.0000 ||
| - | Added support for Windows 11 24H2. |
| IDA-5688 | A potential DLL hijacking vulnerability (CVE-2024-24910) has been identified in Identity Agent for Windows versions lower than R81.070.0000. This vulnerability could enable the loading of third-party libraries into the agent. |
| indigo build B990050069, version R81.069.0000 ||
| - | Added support for Windows 10 22H2. Added support for Windows 11 22H2. |
| IDA-5038 | Fix in wildcard certificate verification mechanism. |
| IDA-5436 | Improvement in PDP discovery mechanism. |
| IDA-4759, IDA-5444 | Optimization and quality fixes. |
| indigo build 990050041, version R81.041.0000 ||
| IDA-4896 | Changed Kerberos authentication so that when a logged-on user is a local user, there is no user Kerberos authentication. |
| indigo build 990050036, version R81.036.0000 ||
| IDA-4783 | Fixed an issue in which Identity Agent fails to connect after Security Gateway reboot. For more information, see [sk179234](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk179324). |
| indigo build 990050035, version R81.035.0000 ||
| - | Added support for Windows 11. |
| - | Added support for Windows 10 21H2. |
| IDA-4381 | Fixed an issue in which Identity Agent fails to re-connect to a prioritized Security Gateway. |
| IDA-4488 | Fixed an issue in which Identity Agent generates logs after users disabled logging. |
| IDA-4587 | Added a new Check Point logo. |
| indigo build B990050028, version R81.028.0000 ||
| - | Added support for Windows 10 21H1. |
| IDA-4166 | Fixed an issue in which the Identity Agent pops up and disappears during every Windows restart. |
| indigo build 990050023, version R81.023.0000 ||
| IDA-3844 | Added an option to configure the number of retries to fetch the logged-on username for user authentication with Kerberos. |
| indigo build 990050018, version R81.018.0000 ||
| IDA-2640, IDA-3017, IDA-3485 | Stability fixes. |
| SA-399 | A denial of service vulnerability (CVE-2021-30356) was reported in Check Point Identity Agent versions lower than R81.018.0000, which could allow low privileged users to overwrite protected system files. |
| IDA-3721 | Identity Agent reports the wrong Windows build version to SmartConsole. |
| IDA-3763 | Kerberos authentication fails after the machine wakes from sleep mode. |
| IDA-3762 | Added a log print about the driver state in helpdesk.log |
| IDA-3760 | Writing logs to Windows Event Viewer is now off by default (controlled by registry key EventLogsEnabled). |
| IDA-3659 | Enhanced "Copy configuration" in the Identity Agent configuration tool. |
| IDA-3653 | Added an option to select which interface the Agent uses in discovery mode when trying to match the configured rule lists from the Active Directory database. |
| IDA-1196 | Added support for Wildcard Certificates. |
| IDA-3678 | Enhanced the IA distributed configuration tool to support multiple domain controllers. |
| indigo build 990050006, version R81.005.0000 ||
| IDA-3607 | Fixed an issue in which the Identity Agent configuration tool fails to add more than one "Trusted Gateway" when the user creates a customized MSI package. |
| indigo build 990050005, version R81.004.0000 ||
| - | Added support for Windows 10 20H2. |
| IDA-3163 | Added an enhancement for Server Discovery and Trust process. See [sk170576](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170576) for more information |
| IDA-3105 | Fixed an issue in which opening the Agent from the "start menu" opens a new instance even if the Agent is already running. |
| IDA-3305 | Improved the collect logs mechanism. |
| IDA-3305 | Fixed an issue in which Machine Kerberos does not work when the organization unit "OU" is configured in AD. |
| IDA-3305 | Fixed an issue in which the connection is stuck and the Agent is unable to connect to the Security Gateway. |
| IDA-3305 | Added the option to skip the search in the DNS Server while the Agent tries to discover PDP (Server Discovery and Trust process). See [sk170576](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170576) for more information. |
| IDA-3350 | Added a new log file: *Helpdesk.log*. The new file contains only relatively important information. |
| IDA-3426 | Fixed an issue in which the certificate approval dialog does not pop up in the initial connection or after a certificate change on the Security Gateway. |
| IDA-3266 | Added a new log file to the Identity Agent configuration tool. |
| IDA-3266 | Fixed an issue in which the Identity Agent configuration tool fails to create a customized MSI package from other customized MSI packages. |
| h_version build 990049090, version R80.234.0000 ||
| IDA-3059 | Fixed an issue in which the Light Agent UI can be opened only from the tray icon. |
| IDA-2268 | Fixed an issue in which the agent is not loaded after switch users. |
| IDA-3038 | Fixed "Error 0x80041002: Couldn't restart all active network interfaces" when installing Packet Tagging in Full agent installation. |
| IDA-3118, IDA-2302, IDA-3199, IDA-3207 | Improved logs mechanism. |
| IDA-3064 | Fixed an issue in which the "settings dialog" pops up in a silent installation. |
| IDA-3265 | Fixed an issue in which the installation can start with wrong parameters. For example, installing Packet Tagging with Terminal server agent. |
| h_version build 990049072, version R80.219.0000 ||
| IDA-1804 | Fixed an issue in which the Full Agent UI can be opened only from the tray icon. |
| IDA-2237, IDA-2238 | Fixed an issue in which an unconnected umbrella icon is displayed when opening the Distributed Configuration tool or the Agent Configuration tool. |
| IDA-2944 | Fixed log collection issues. |
| IDA-2287, IDA-2288, IDA-2164, IDA-2956, IDA-2965 | Improved logs mechanism. |
| h_version build 990049056, version R80.202.0000 ||
| IDA-2516, IDA-2498 | Fix an issue when Identity Agent global properties are not downloaded from the Security Gateway to the agent (for example disabling agent features like quit/disconnect) |
| h_version build 990049047, version R80.191.0000 ||
| IDA-2258 | Fix error notification of MAD service. |
| IDA-2286 | Fix an issue when "collect logs" operation collects empty files. |
| IDA-2293 | Fix a service crash when changing the log path to a restricted directory. |
| IDA-2316 | Resolve an issue when "connected" balloon is shown even if the agent is already connected. |
| IDA-2317 | Add a link to the cab file location after collect logs instead of sending the cab file in email. |
| IDA-2297 | Add an option to exclude virtual interfaces from the machine address calculation for PDP rule base (by adding registry key InterfaceNameToExclude), for example exclude "Hyper-V interface. |
| IDA-2222 | Enhance roaming mechanism. |
| IDA-2298 | Fix an issue when error code 109 appears when stopping MAD service. |
| IDA-2257 | Fix an issue when the umbrella icon on tray disappears. |
| IDA-2259 | Change "Managed Asset Status" to "Machine Authentication Status" in agent UI. |
| h_version build 990049042, version R80.185.0000 ||
| IDA-2078, IDA-2084 | Once a computer is not connected to the network, no PDP will be assigned for communication. |
| IDA-2054 | Roaming mechanism does not work in case of network disconnection. |
| IDA-2086, IDA-2063, PRHF-3888 | Fix log collection issues. |
| PRHF-3410 | Fix PDP discovery issue when using both Identity Agent and TS Agent in the distributed configuration tool. |
| PRHF-3567 | Fix in machine authentication logic. |
| h_version build 990049038, version R80.181.0000 ||
| IDA-2005 | Fix an issue when monitoring feature sends monitoring traffic in Full agent. |
| h_version build B990049037, version R80.180.0000 ||
| IDA-1808 | Resolve an issue when the agent displays the authenticated user without the domain. |
| IDA-1936 | Fix an issue when changing the agent log path didn't take effect |
| PRHF-2555 | Service crash fix. |
| h_version build 990049032, version R80.174.0000 ||
| PRHF-2566 | Fix an issue when the UI dialog is visible every Windows restart. |
| h_version build 990049030, version R80.172.0000 ||
| IDA-1356 | Enhance communication channel with Security Gateways in low bandwidth conditions. |
| h_version build 990049023, version R80.167.0000 ||
| IDA-856 | Added the crs.xml file for Windows agents MSI package, which contains the agent fixes. This file will be checked during installation to verify no content is overwritten. |
| IDA-1008 | Fix a crash happens once trying to present invalid certificate details. |
| IDA-1154 | Full Agent redesign - Move business logic to the Windows service from the UI process. |
| IDA-351 | Added the ability to connect to higher priority PDP Security Gateway (requires Security Gateway R80.20 or above). |
{#IdentityAgentForWindowsTable}
### Resolved Issues - Identity Agent for macOS {#Resolved Issues - Identity Agent for macOS}
Enter the string to filter this table:
|--------------------|--------------------------------------------------------------------------------------------------------------------------------------------|
| ID | Changes |
| indigo build 990050006, version R81.006.0000 ||
| - | Added support for macOS Ventura (13.0). Added support for macOS Sonoma (14.0). |
| - | Added support for macOS version Monterey (12.0) with Apple M1. |
| IDA-4408 | Fixed an issue in which the Identity Agent for macOS sends keep-alive messages to the Security Gateway more often than needed. |
| IDA-4412 | Fixed an issue in which the Identity Agent for macOS fails to connect upon reboot. |
| IDA-4672 | Added a new Check Point logo. |
| indigo build 990050003, version R81.003.0000 ||
| - | Added support for macOS Big Sur (11.0). |
| IDA-2710, IDA-2702 | Fixed an issue in which the Agent cannot connect to the Security Gateway after a change to a network event. |
| IDA-2680 | The Agent is now notarized by Apple. |
| IDA-1506 | Fixed an issue in which the Agent version was not updated in the "about" dialog. |
| h_version build 990049010, version R80.002.0000 ||
| IDA-2538 | Resolve an issue with the agent signing. |
| h_version build 990049009, version R80.002.0000 ||
| IDA-2312 | Resolve an issue when the agent fails to connect to the Security Gateway due to untrusted certificate. |
| h_version build 990049007, version R80.002.0000 ||
| IDA-1919 | Resolve an issue when the agent is unable to connect to the Security Gateway due to the 'Certificate error'. |
| IDA-1880 | Resolve a scenario when the agent is unable to connect to the Security Gateway when auto discovery is set and domain name resolving fails. |
| h_version build 990049002, version 1.126 ||
| IDA-877 | Support 64-bit for Identity Agent on macOS. |
| IDA-1172 | Support configuring PDP servers list and rule-base on the agent side. |
{#IdentityAgentFormacOSTable}
### Resolved Issues - Identity Agent for a Terminal Server {#Resolved Issues - Identity Agent for a Terminal Server}
Enter the string to filter this table:
|----------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ID | |
| indigo_sig build 990050089, versionR81.091.0000 (Release Date: Jun 25, 2026) ||
| AAD-9796 | Resolved an issue in which Identity Agent for a Terminal Server failed to establish trust with the Policy Decision Point (PDP) Identity Awareness Gateway after agent installation or upgrade. The issue was caused by the agent failing to save the shared secret for the communication. |
| AAD-9744 | Resolved an issue in which the UIP driver failed to load properly on Identity Agent for a Terminal Server v1 (MUH1). |
| indigo_sig build 990050086, version R81.087.0000 (Release Date: Jun 11, 2026) ||
| AAD-10834 | Corrected an issue where a previously announced fix (AAD-8432) was not fully integrated in the prior release. The fix is now included. |
| indigo_sig build 990050084, version R81.085.0000 (Release Date: Dec 11, 2025) ||
| - | For Identity Agent for a Terminal Server version 2 (MUH2): Added support to install the agent on Windows Server 2025. |
| AAD-8432 | For Identity Agent for a Terminal Server version 2 (MUH2): Resolved an issue that caused the agent to not connect to the secondary Policy Decision Point (PDP) Security Gateway when connection fails to the primary PDP Gateway. |
| indigo_sig build 990050083, version 81.084.0000 (Release Date: Nov 23, 2025) ||
| SA-833 | Resolved a security issue (CVE-2025-8304). For more information, see [sk184263](https://support.checkpoint.com/results/sk/sk184263). |
| SA-832 | Resolved a security issue (CVE-2025-8305). For more information, see [sk184264](https://support.checkpoint.com/results/sk/sk184264). |
| AAD-6105 | For Identity Agent for a Terminal Server version 2 (MUH2): In some scenarios, Kerberos authentication retries use the machine account instead of the user account |
| AAD-4328, AAD-3037 | For Identity Agent for a Terminal Server version 2 (MUH2): Added support for the Terminal Server to use an IPv6 address for its communication with the Identity Awareness Gateway. For prerequisites and configuration instructions, see [sk184243](https://support.checkpoint.com/results/sk/sk184243). |
| AAD-6191 | For Identity Agent for a Terminal Server version 2 (MUH2): Improved certificate parsing of PDP certificates to detect and prefer the SAN (Subject Alternative Name) extension over the CN (Common Name) extension. |
| AAD-7796 | For Identity Agent for a Terminal Server version 2 (MUH2): Resolved a cosmetic issue that caused Windows 11 clients to appear as Windows 10 in SmartConsole logs. |
| AAD-7839 | For Identity Agent for a Terminal Server version 2 (MUH2): Resolved an issue that, in some scenarios, caused the *MADService.exe* process to crash when the Terminal Server is rebooted. |
| indigo build B990050070, version R81.070.0000 ||
| IDA-5688 | A potential DLL hijacking vulnerability (CVE-2024-24910) has been identified in Identity Agent for a Terminal Server versions lower than R81.070.0000. This vulnerability could enable the loading of third-party libraries into the agent. |
| indigo build B990050069 version R81.069.0000 ||
| IDA-5038 | Fix in wildcard certificate verification mechanism. |
| IDA-5065 | Fix to a scenario in which user status is still in "authenticated" state after logout. |
| IDA-5436 | Improvement in PDP discovery mechanism. |
| IDA-5004 | Fix for the MUH2 driver for scenario which packets were not tagged correctly. |
| IDA-5276, IDA-5444, IDA-5004 | Optimization and quality fixes. |
| indigo build 9900500401version R81.041.0000 ||
| IDA-4896 | Changed Kerberos authentication so that when a logged-in user is a local user, there is no user Kerberos authentication. |
| indigo build 990050036, version R81.036.0000 ||
| IDA-4783 | Fixed an issue in which Identity Agent for a Terminal Server fails to connect after Security Gateway reboot. See [sk179234](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk179324) for more information. |
| indigo build 990050035, version R81.035.0000 ||
| - | Added support for Windows Server 2022. |
| IDA-4488 | Fixed an issue in which Identity Agent for a Terminal Server generates logs after users disabled logging. |
| IDA-4587 | Added a new Check Point logo. |
| indigo build B990050028, version R81.028.0000 ||
| - | Added support for Windows 10 version 21H1. |
| IDA-4145 | Removed the option for non-admin users to see which other users are connected. |
| indigo build 990050023, version R81.023.0000 ||
| IDA-4090 | Fixed an issue in which the Identity Agent configuration tool fails to copy the "Shared Secret" value when the user creates a customized MSI package. |
| IDA-3972 | Fixed an issue in which an "*invalid shared secret*" pop-up message appears when the PC language is not English. |
| IDA-3844 | Added an option to configure the number of retries to fetch the logged-on username for user authentication with Kerberos. |
| indigo build 990050018, version R81.018.0000 ||
| IDA-2640, IDA-3017, IDA-3485 | Stability fixes. |
| SA-399 | A denial of service vulnerability (CVE-2021-30356) was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files. |
| IDA-3721 | Identity Agent reports the wrong Windows build version to SmartConsole. |
| IDA-3763 | Kerberos authentication fails after the machine wakes from sleep mode. |
| IDA-3762 | Added a log print about the driver state in helpdesk.log |
| IDA-3760 | Writing logs to Windows Event Viewer is now off by default (controlled by registry key EventLogsEnabled). |
| IDA-3659 | Enhanced the "Copy configuration" in the Identity Agent configuration tool. |
| IDA-3653 | Added an option to select which interface the Agent uses in discovery mode when trying to match the configured rule lists from the Active Directory database. |
| IDA-1196 | Added support for Wildcard Certificates. |
| IDA-3678 | Enhanced the IA distributed configuration tool to support multiple domain controllers. |
| indigo build 990050006, version R81.005.0000 ||
| IDA-3607 | Fixed an issue in which the Identity Agent configuration tool fails to add more than one "Trusted Gateway" when the user creates a customized MSI package. |
| indigo build 990050005, version R81.004.0000 ||
| IDA-3100 | Identity Agent for a Terminal Server v2: Added optional support to identify users via the running process (as in MUH1) instead of login/ logoff events. See [sk170635](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170635) for more information. |
| IDA-3163 | Added an enhancement for he Server Discovery and Trust process. See [sk170576](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170576) for more information. |
| IDA-3305 | Improved collect logs mechanism. |
| IDA-3305 | Fixed an issue in which Machine Kerberos does not work when the organization unit "OU" is configured in AD. |
| IDA-3305 | Added the option to skip the search in the DNS Server while the Agent tries to discover PDP (Server Discovery and Trust process). See [sk170576](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170576)for more information. |
| IDA-3350 | Added a new log file: *Helpdesk.log*. The new file contains only relatively important information. |
| IDA-3362 | Fixed an issue in which the connection is stuck and the Agent is unable to connect to the Security Gateway. |
| IDA-3426 | Fixed an issue in which the certificate approval dialog does not pop up in the initial connection or after a certificate change on the Security Gateway. |
| IDA-3520 | Fixed an issue in which Identity Agent for a Terminal Server v2 (aka MUH2) does not identify users when installed remotely. |
| h_version build 990049090, version R80.234.0000 ||
| IDA-3088 | Added a support for Identity Agent for a Terminal Server v2 (aka MUH2) in the IA configuration utility. |
| IDA-3106 | Added a support for fetch_by_sid to Identity Agent for a Terminal Server v2 (aka MUH2). For more information, refer to [R80.40 Identity Awareness Administrator Guide](https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_IdentityAwareness_AdminGuide/Default.htm). |
| IDA-3185 | Added support for updating group changes in existing sessions in Identity Agent for a Terminal Server v1 (aka MUH1). |
| IDA-3118, IDA-2302, IDA-3199, IDA-3207 | Improved logs mechanism. |
| IDA-3265 | Fixed an issue in which installation can start with incorrect parameters. For example, installing Packet Tagging with Terminal server agent. |
| h_version build 990049072, version R80.219.0000 ||
| IDA-2020 | Added the option to monitor the status of connected Identity Agent for a Terminal Server v2 (AKA MUH2). |
| IDA-3009, IDA-2985 | Fixed an issue in which incorrect parameters can be inserted into the MUH agent settings. |
| IDA-2944 | Fixed log collection issues. |
| IDA-2164, IDA-2956, IDA-2074 | Improved logs mechanism. |
| h_version build 990049056, version R80.202.0000 ||
| IDA-2641 | Added the support for a new version of Terminal Server (v2). Supported with Security Gateway R80.40 and higher. For more information, refer to the Identity Awareness Administration Guide. |
| h_version build 990049047, version R80.191.0000 ||
| IDA-2258 | Fix error notification of MAD service. |
| IDA-2313 | Add an option in MUH agent to collect to non-admin users (by adding registry key MUHCollectLogsForAllUsersEnabled with true value). |
| IDA-2317 | Add a link to the cab file location after collect logs instead of sending the cab file in email. |
| IDA-2297 | Add an option to exclude virtual interfaces from the machine address calculation for PDP rule base (by adding registry key InterfaceNameToExclude), for example exclude 'Hyper-V interface. |
| PRHF-5185 | Exclude "nt service" from domain account. |
| h_version build 990049042, version R80.185.0000 ||
| IDA-2054 | Roaming mechanism doesn't work in case of network disconnection. |
| PRHF-3410 | Fix PDP discovery issue when using both Identity Agent and Identity Agent for Terminal Server in the Distributed Configuration Tool. |
| h_version build 990049038, version R80.181.0000 ||
| IDA-2005 | Make monitoring feature \[IDA-566\] configurable - add an option to enable/disable it (off by default) and set monitoring interval. |
| h_version build 990049037, version R80.180.0000 ||
| PRHF-2426 | Fix an issue when MUH authentication messages are stuck and the agent is unable to connect to the Security Gateway. |
| h_version build 990049030, version R80.172.0000 ||
| IDA-1674 | Fixed a scenario where the agent is not connecting to the Security Gateway. |
| IDA-1356 | Enhance communication channel with Security Gateways in low bandwidth conditions. |
| h_version build 990049023, version R80.167.0000 ||
| IDA-856 | Added the crs.xml file for Windows agent MSI packages, which contains the agent fixes. This file will be checked during installation to verify no content is overwritten. |
| IDA-719 | Added the monitoring feature in Terminal Servers agent. The information will be presented in CPview on the Check Point Security Gateway R80.20 and higher. |
| IDA-214 | Improving port allocation handling mechanism. |
{#TerminalServerAgentTable}
Related Documentation {#Related Documentation}
----------------------------------------------
For more information about Identity Awareness Clients, see the [Identity Awareness Clients Administration Guide](https://sc1.checkpoint.com/documents/Identity_Awareness_Clients_Admin_Guide/Default.htm).
For more information about the Identity Awareness Software Blade on a Security Gateway, see the [Identity Awareness Administration Guide](https://support.checkpoint.com/product/436#f-commonsource=C.%20Documentation) for your version.
---
# Agent Instructions
This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.
## Navigating This Knowledge Base
- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content