https://community.checkpoint.com/t5/Mobile/Two-factor-authentication-for-mobile-remote-access-users/m-p/216315#M1149 <P>Good Day</P><P>I have IPsecVPn and Mobile access blade enabled and my remote access users use secure remote to connect. I have recently applied the R81.10 Take 139 Security hardening for Remote Access VPN users thereafter my local users are encountering an error when connecting of get a user username authenticated by Firewall-1 authentication warning.</P><P>Upon checking the logs from source address i identified under mobile access details a Failed login Factor: 1st factor - Password and reason - blocked internal user loging woth 1 -factor password authentication.</P><P>&nbsp;</P><P>Checkpoint TAC has suggested i enable two factor authentication/MFA please is there any SK for configuring MFA.</P><P>&nbsp;</P><P>regards</P><P>&nbsp;</P> Tue, 04 Jun 2024 08:31:21 GMT ThabEugS 2024-06-04T08:31:21Z https://community.checkpoint.com/t5/Mobile/Two-factor-authentication-for-mobile-remote-access-users/m-p/216315#M1149 <P>Good Day</P><P>I have IPsecVPn and Mobile access blade enabled and my remote access users use secure remote to connect. I have recently applied the R81.10 Take 139 Security hardening for Remote Access VPN users thereafter my local users are encountering an error when connecting of get a user username authenticated by Firewall-1 authentication warning.</P><P>Upon checking the logs from source address i identified under mobile access details a Failed login Factor: 1st factor - Password and reason - blocked internal user loging woth 1 -factor password authentication.</P><P>&nbsp;</P><P>Checkpoint TAC has suggested i enable two factor authentication/MFA please is there any SK for configuring MFA.</P><P>&nbsp;</P><P>regards</P><P>&nbsp;</P> Tue, 04 Jun 2024 08:31:21 GMT https://community.checkpoint.com/t5/Mobile/Two-factor-authentication-for-mobile-remote-access-users/m-p/216315#M1149 ThabEugS 2024-06-04T08:31:21Z https://community.checkpoint.com/t5/Mobile/Two-factor-authentication-for-mobile-remote-access-users/m-p/216623#M1152 <P>The configuration of MFA generally requires an external authentication server.<BR />The only MFA we provide built-in is via DynamicID.<BR />See:&nbsp;<A href="https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_MobileAccess_AdminGuide/Content/Topics-MABG/DynamicID.htm" target="_blank">https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_MobileAccess_AdminGuide/Content/Topics-MABG/DynamicID.htm</A>&nbsp;</P> Thu, 06 Jun 2024 01:13:52 GMT https://community.checkpoint.com/t5/Mobile/Two-factor-authentication-for-mobile-remote-access-users/m-p/216623#M1152 PhoneBoy 2024-06-06T01:13:52Z