What cli command is run on the GW to verify communication to the identity Collector?

Question

Options

• Apdp connections idc
• Bpep connections idc
• Cshow idc connections
• Dfwd connected

• A
  92% (44)
• B
  2% (1)
• C
  2% (1)
• D
  4% (2)

Explanation

On a Check Point Security Gateway, the PDP (Policy Decision Point) is the component responsible for consuming identity data from external sources, including the Identity Collector (IDC). Running pdp connections idc on the gateway's CLI directly queries the PDP subsystem to display the status of its connections to any configured Identity Collectors, making it the correct tool for this verification task.

Why the distractors are wrong:

• B (pep connections idc) - PEP (Policy Enforcement Point) enforces access decisions but does not manage identity source connections; swapping pdp for pep is a common trap.
• C (show idc connections) - This follows Cisco IOS show command syntax, not Check Point's CLI structure; no such command exists in Gaia/Expert mode.
• D (fwd connected) - fwd relates to the FireWall Daemon and is used to check connections to the Security Management Server, not to identity sources.

Memory tip: Think "PDP decides who you are" - the Policy Decision Point is what talks to identity sources. When you need to verify the IDC link, you go to the decision-maker: pdp connections idc.

No community discussion yet for this question.