topic Re: RADIUS setup - Microsoft NPS in Firewall and Security Management

RADIUS setup - Microsoft NPS

AlainC — Wed, 19 Feb 2025 10:22:18 GMT

Hello,

I have a customer where VPN (Checkpoint 5200 - Smartconsole 81.20) authentication is still done directly via LDAP (no comment please 😉 ). I want to change this to RADIUS, also because I want to enable MFA for VPN (third party add-on to NPS) in a future step. I have an existing Microsoft NPS server. I've found some guides in the community (1 via smartconsole, 1 via GAIA) to assist me but I wanted to be sure if nothing more recent exists? Any suggestions?

https://support.checkpoint.com/results/sk/sk105575

and a pdf: Using RADIUS Authentication for Remote Access VPN

Thanks

Re: RADIUS setup - Microsoft NPS

PhoneBoy — Wed, 19 Feb 2025 16:17:15 GMT

The process for integrating with NPS hasn’t changed significantly in quite some time, so the existing guides should suffice.
However, make sure you are on a recent JHF that includes the fixes for Blast RADIUS as those will be necessary to integrate with recent Microsoft releases: https://support.checkpoint.com/results/sk/sk182516

Re: RADIUS setup - Microsoft NPS

AlainC — Thu, 20 Feb 2025 10:13:44 GMT

Thanks for the reply... and thanks for this information. My Microsoft NPS is fixed for blast-radius, so I will execute the proposed command on the management server. My JHF is ok,