topic Re: RA VPN with Multiple Authentication in SASE and Remote Access

RA VPN with Multiple Authentication

Americo_two — Thu, 09 Jul 2020 02:20:28 GMT

Hello everybody,

Today my users access the RA VPN using the LDAP authentication, I want to use the same LDAP authentication with a personal certificate, I have checked on CP_R80.10_RemoteAccessVPN_AdminGuide.pdf and here is possible see that is possible to use, but I couldn´t found the steps to configure.

Anyone can suggest me one SK to follow to do this configuration?

Re: RA VPN with Multiple Authentication

PhoneBoy — Sat, 11 Jul 2020 03:11:24 GMT

What you're looking for is Multiple Login Options.
Even the SK that mentions it refers you back to the documentation.
Here's an HTML version: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_RemoteAccessVPN_AdminGuide/html_frameset.htm

Re: RA VPN with Multiple Authentication

Americo_two — Wed, 22 Jul 2020 15:24:05 GMT

Hi PhoneBoy,

One question, if a choose the option "Certificate + username Password" were CP will get this information ? today I have one certificate installed on my domain machines, my idea is to allow the VPN connection just to hosts with this certificate because today a user can use an external host to connect on VPN.

Re: RA VPN with Multiple Authentication

PhoneBoy — Wed, 22 Jul 2020 16:11:29 GMT

The user provides the certificate (either the P12 file or from the certificate store), which must be signed by a trusted CA.
If you're not using the internal CA for this, you will have to create the relevant object for it (called an OPSEC CA) and import its public key.

Re: RA VPN with Multiple Authentication

Americo_two — Sun, 02 Aug 2020 23:29:16 GMT

Thanks man.

Re: RA VPN with Multiple Authentication

Milan_Jovanovic — Tue, 06 Oct 2020 12:47:08 GMT

Hello PhoneBoy,

Is this same for R80.40? For RA vpn can I use as authentication 2 mandatory option LDAP user name and pass and at the same time certificate that will be generated on ldap server and what are steps to implement this?