topic Re: Gaia Radius auth with encryption in Firewall and Security Management

Gaia Radius auth with encryption

Hondenkop — Mon, 23 Jun 2025 14:36:17 GMT

Hi all,
Currently I'm busy with adding RADIUS auth to the gaia portals. Sadly I cannot seem to find a way to change the encryption method from PAP (no encryption) to MSCHAP2.

Am I missing something? The auth is currently working with PAP. So this is not an issue with the auth not working, just wanting to encrypt my password in-transit.

Attached a screenshot from Event viewer as we are using the Windows NPS

Thanks!

Re: Gaia Radius auth with encryption

PhoneBoy — Wed, 25 Jun 2025 21:05:34 GMT

We only support PAP: https://support.checkpoint.com/results/sk/sk121223

Re: Gaia Radius auth with encryption

the_rock — Thu, 26 Jun 2025 01:06:30 GMT

Even though CHAP is more secure, but as Phoneboy said, for now, only PAP is supported. I had case about this recently with TAC and they confirmed the same.

If you need CHAP added, I would submit an RFE.

Andy

Re: Gaia Radius auth with encryption

Hondenkop — Thu, 26 Jun 2025 06:45:32 GMT

Thanks for the feedback. I'm not really comfortable with sending clear text passwords. But I guess it'll have to do.

Re: Gaia Radius auth with encryption

Hondenkop — Thu, 26 Jun 2025 06:46:18 GMT

Thanks, I just submitted the RFE 1Bgs1936F

Re: Gaia Radius auth with encryption

the_rock — Thu, 26 Jun 2025 10:31:47 GMT

Sounds good.