topic Microsoft AoVPN with Checkpoint in SASE and Remote Access

Microsoft AoVPN with Checkpoint

DB_AH — Wed, 05 Aug 2020 19:08:52 GMT

We are trying to setup the Microsoft Always on VPN with our Checkpoint 6200 running R80.40. In our research we have found there are two ways to connect the remote devices with the 6200 and that is:

1. User based

2. Machine based

The user based uses the Checkpoint Capsule plugin from the Microsoft store and some configuration on the machine side but beyond that it should "just work" from what we are told. The drawback on this is no connection to the device if the user is not logged in so no automatic updates and such.

The machine based is certificate based but I cannot find if it requires anything beyond the 6200 to be configured. The drawback on this is it uses IKEv2 which is blocked by some firewalls. The advantage for this is if it is powered on and has a network connection it is connected to the home base so we can manage the device as if it was on our network.

With all that said, can anyone point me in the direction of some tutorials or guides on setting this up? I would prefer to get the machine based certificates going but if I can get a good walkthrough on setting up the user based side I will take it.

Re: Microsoft AoVPN with Checkpoint

PhoneBoy — Fri, 07 Aug 2020 20:32:12 GMT

What I gather from your message is that you'd like both machine and user-based authentication.
For that, you have to use our Endpoint VPN client, not the Capsule one from the Microsoft Store.
That's mentioned here: https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_RemoteAccessVPN_AdminGuide/Content/Topics/Machine-Certificate.htm

The guide for Capsule VPN can be found here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk107536
This client only supports one method of authentication, as far as I know, not multiple as the Endpoint VPN client does.

Re: Microsoft AoVPN with Checkpoint

DUK — Tue, 31 May 2022 22:49:01 GMT

The first link seem to be broken or deprecated. Can you please share the current documentation link for R81.10?

Re: Microsoft AoVPN with Checkpoint

G_W_Albrecht — Thu, 02 Jun 2022 15:13:55 GMT

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RemoteAccessVPN_AdminGuide/Topics-VPNRG/Machine-Certificate.htm?Highlight=machine%20cert