MFA on Remote access VPN

kachanner — Wed, 03 Jun 2026 15:58:19 GMT

I currently have Harmony Endpoint in my environment, and I want to switch all the users' authentication methods to using an additional factor to log in.

There is currently an integration with the Identity Provider Microsoft Azure, and the MFA over VPN works as an authentication when set up manually on a user's computer (I have it enabled and working). The issue now is to get it pushed to everyone. I tested editing the .trac file, but that works with new installations only from my tests, so I would have to uninstall everyone's EDR, then reinstall it.

Additionally installing the ".trac" package on an endpoint with EDR already installed doesn't change the site settings/authentication method so it remains with the same settings it previously had.

I am seeking some guidance to see if this can be achieved whether through the Infinity portal, Smartconsole, or any other way that might exist.

Re: MFA on Remote access VPN

PhoneBoy — Wed, 03 Jun 2026 21:46:59 GMT

There are a couple options:

Delete and re-add the VPN site
Replace the trac.config file on the Endpoint: https://support.checkpoint.com/results/sk/sk183469

Neither option requires a reinstall.

topic MFA on Remote access VPN in Endpoint

MFA on Remote access VPN

Re: MFA on Remote access VPN