What is the BEST method to deploy Identity Awareness for roaming users?
A . Use Office Mode
B . Use identity agents
C . Share user identities between gateways
D . Use captive portal
Answer: B
Explanation:
Using Endpoint Identity Agents give you:
– User and machine identity
– Minimal user intervention C all necessary configuration is done by administrators and does not require user input.
– Seamless connectivity C transparent authentication using Kerberos Single Sign-On (SSO) when users are logged in to the domain. If you do not want to use SSO, users enter their credentials manually. You can let them save these credentials.
– Connectivity through roaming C users stay automatically identified when they move between networks, as the client detects the movement and reconnects.
Reference: https://www.checkpoint.com/products/identity-awareness-software-blade/