topic Re: Gaia OS password successful login but deny access to published web application in Firewall and Security Management

Gaia OS password successful login but deny access to published web application

arnoldrs — Fri, 01 Jan 2021 21:16:43 GMT

Any idea how to solve about this denial logs - "Reason: The application's policy requires a specific login method." in Checkpoint Version R80.30

This regards to Mobile Access whereby I use OS Password (Gaia) for authentication. It authenticates successfully and can see published application. However, when clicking the application it gives - Error page

Error: Access denied. The destination of your request requires a more secure authentication method at login time. (8)

Using different authentication like Radius, Checkpoint username/password have no issues. The reason for using Gaia OS password authentication is due to 32 characters compared to Checkpoint local username/password and we cannot anymore use our Radius authentication/LDAP Authentication due to some restrictions.

Version R80.30

Re: Gaia OS password successful login but deny access to published web application

PhoneBoy — Sat, 02 Jan 2021 00:39:08 GMT

How precisely did you configure the app?
I believe internal password in R80.40 supports longer passwords, FYI.

Re: Gaia OS password successful login but deny access to published web application

arnoldrs — Sat, 02 Jan 2021 06:41:09 GMT

I think the published web application is configured precisely as it accessible with no error page when login using Radius and Checkpoint Internal password.

We have already plan to upgrade to R80.40 but I think it will take so much time to get the approval.

Re: Gaia OS password successful login but deny access to published web application

PhoneBoy — Sat, 02 Jan 2021 17:55:30 GMT

I’m not familiar with a setting in the web application to require a specific type of authentication.
A TAC case is suggested here.

Re: Gaia OS password successful login but deny access to published web application

Wolfgang — Mon, 04 Jan 2021 07:05:08 GMT

Did you changed the protection level for this application to a more restrictive authentication ?

The protection level is defined at the gateway (default settings) but you can change this for every application.