What Identity Agent allows packet tagging and computer authentication?

The Endpoint Security Client is a broader endpoint protection suite and is not the specific Identity Awareness agent associated with packet tagging and computer authentication functionality.

The Full Identity Agent supports packet tagging - which uses Kerberos tickets to tag network packets with user identity information - as well as computer authentication, enabling granular identity-based policy enforcement at the gateway. These two capabilities are exclusive to the Full Agent and are not present in lighter agent variants, making it the required choice when both features are needed.

The Light Identity Agent supports only basic user authentication and explicitly lacks packet tagging and computer authentication capabilities.

System Agent is not a defined Check Point Identity Awareness agent type that provides packet tagging or computer authentication functionality.