topic Re: user auth using certificates in Firewall and Security Management

user auth using certificates

Nikolaos_Liakop — Sun, 06 Feb 2022 00:15:43 GMT

Hello ,

I d like to ask whether is it possible to authenticate users to an http/https server with certificates instead of user/pass.

Right not we have

Source: Dealers@Any

Destination: HTTP Server

Service: HTTP

Action: User Auth

All the users that are members of the Dealers User Group have local checkpoint password set. Is it possible to authenticate via user certificates instead ?

Thanks

Re: user auth using certificates

G_W_Albrecht — Sun, 06 Feb 2022 08:51:50 GMT

Yes - see CP_R81.10_RemoteAccessVPN_AdminGuide (https://downloads.checkpoint.com/dc/download.htm?ID=115921).

Re: user auth using certificates

_Val_ — Mon, 07 Feb 2022 08:11:42 GMT

With our without Remote Access?

Re: user auth using certificates

_Val_ — Mon, 07 Feb 2022 08:13:03 GMT

Uh, just re-read your post. Are you really using User Authentication as an action? That feature is 25 years old. Please migrate to Identity Awareness.

Re: user auth using certificates

Nikolaos_Liakop — Mon, 07 Feb 2022 09:56:27 GMT

Without remote access. I think that those who implemented it had consulted sk14246 on an R77.30 device.

The external partners (without remote access) were accessing https://webserver and were authenticating with certificates.

Now it is time to upgrade their hardware and also upgrade the OS to R80.X and I don't exactly know what to do.

Re: user auth using certificates

Nikolaos_Liakop — Mon, 07 Feb 2022 13:49:53 GMT

I also think that the feature was called clientless vpn.

Does that option exist on r80.X ?