topic Re: Machine Authentication support for R80.10 gateways in Endpoint

Machine Authentication support for R80.10 gateways

Mike_Goodwin — Mon, 02 Jul 2018 14:20:49 GMT

Looking to deploy Machine Authentication as a replacement of Microsoft DirectAccess.

As per SK121173, there is a hotfix required for the gateway, that I am told is only supported on R77.30 GW's.

Now that R80.20M1 is released, which brings management inline with R77.30.03 (the other pre-req for this), is there any ETA on when the gateway HFA for this will be released and supported for an R80.10 gateway?

I don't understand why, with R77.30 being less than 1 year away from EOS, that there is still features that *require* me to use a version that is in its final year of support! For a new deployment, I am having to explain to the user that we know a substantial upgrade is going to be needed at some point in the next 12 months - that is a terrible user experiance.

Re: Machine Authentication support for R80.10 gateways

PhoneBoy — Wed, 04 Jul 2018 00:52:53 GMT

I assume you're referring to this: Machine Certificate Installation on Security Gateway for Authentication to VPN Clients

This was provided as a customer-specific release and is not yet in the maintrain.

We are planning to provide a version of this fix for R80.10 and integrating it into our next releases.

Please get in contact with your local Check Point office for further assistance.

Re: Machine Authentication support for R80.10 gateways

Steven_Bailey1 — Tue, 29 Jan 2019 13:57:10 GMT

Great info Dameon, thanks.

I understand that this HF (sk121173) is available for R80.10 JHF-take_112.

However, I have requested our CP-SE to submit an RFE to port the HF into R80.10 JHF-Take_154 (installed on Azure Vsec/CloudGuard cluster) also.

Can I just confirm with you, if by upgrading the SMS (premise open server) from R80.10 to R80.20GA JHF_take13, will not negatively impact what we are trying to achieve on the Azure gateway with sk121173 ?

- I recon it won't, but I can do without any gotchas!

Re: Machine Authentication support for R80.10 gateways

PhoneBoy — Tue, 29 Jan 2019 19:07:04 GMT

If the hotfix is gateway side only then I don't believe so, but best to check with your local SE.

Re: Machine Authentication support for R80.10 gateways

Daniel_Hainich — Mon, 01 Jul 2019 09:28:50 GMT

any news on this?

will it be available in R80.20 with ongoing JHF or in R80.30?

Thanks

Daniel

Re: Machine Authentication support for R80.10 gateways

G_W_Albrecht — Mon, 01 Jul 2019 11:22:10 GMT

Contact Check Point Solution Center via the local Check Point office to get the required hotfix.