topic Re: Issue on client when DynamicID is configured for both SMS and Email in SASE and Remote Access

Issue on client when DynamicID is configured for both SMS and Email

waynej — Fri, 08 May 2020 15:32:39 GMT

Hi,

I've got a strange issue with the VPN client when I try to use both email and SMS for DynamicID. When connecting, the following prompt pops up:

I've figured out that this is prompting for which method to use to send out the DynamicID code. If I enter 1, it sends an SMS and if I enter 2 it sends an email. Is it possible to change this message to something informative so users know what to do when they are prompted? I've been through the documentation and looked at all the settings I can find, but I can't see where I can set/alter this message.

Also, is it possible for administrators to control which is used by default for which users? I have a client that would like to use email for employee's and SMS for external consultants.

Thanks,

Wayne

Re: Issue on client when DynamicID is configured for both SMS and Email

PhoneBoy — Mon, 18 May 2020 00:56:27 GMT

It should display something else there, according to R&D.
Recommend opening a TAC case here.

Re: Issue on client when DynamicID is configured for both SMS and Email

waynej — Wed, 27 May 2020 08:54:18 GMT

Thanks, I will open a case with TAC.

Re: Issue on client when DynamicID is configured for both SMS and Email

MartinTzvetanov — Thu, 28 May 2020 13:01:26 GMT

I had the same requirements from a customer - to send the code via both mail and sms when using a vpn client. I had a case with TAC and they said that sms and mail works together only on Mobile access portal, not on a VPN client.

Re: Issue on client when DynamicID is configured for both SMS and Email

waynej — Thu, 28 May 2020 13:07:27 GMT

I hope that is not the case. I have opened a case, they have not provided a fix as yet.

The functionality works fine, the issue here is the message that gets displayed. Instead of "password:", it should say something like "Please select how you want to receive the code. Enter '1' for SMS and '2' for Email".

I think a drop down box would be the best, but just changing the message would be helpful right now.

Re: Issue on client when DynamicID is configured for both SMS and Email

MartinTzvetanov — Thu, 28 May 2020 13:10:58 GMT

I've been told that a fix is being prepared but in the end this is what the TAC send me:

"In addition to that I've checked admin guides and in general the option to configure SMS and E-mail at the same time is possible only when we connecting via Mobile Access and not End Point solution.

Page 150 "How Dynamic ID works" shows us the explanation for the flow when we connecting to the Mobile Access portal.

https://dl3.checkpoint.com/paid/45/45a0ccc6eb278c1a067ba9cc15a73222/CP_R80.20_MobileAccess_AdminGuide.pdf?HashKey=1582553574_3485bfa76cbab6ba191330fd8e0a94cc&xtn=.pdf

I've consulted with our R&D team and they have confirmed there is no option to configure both SMS and E-MAIL for the EndPoint clients."

Link maybe won't work but open the Mobile Access admin guide and search for Dynamic ID and check.

Re: Issue on client when DynamicID is configured for both SMS and Email

waynej — Thu, 28 May 2020 13:35:09 GMT

Thanks for sharing the feedback from TAC.

I hope a fix is on the way. As I said, the functionality is there, it is just badly presented in the UI.

Re: Issue on client when DynamicID is configured for both SMS and Email

MartinTzvetanov — Thu, 28 May 2020 13:41:20 GMT

I also faced the Response field and didn't know what to enter here. I tried with the full mail/phone number of the user and it didn't work. Didn't try with 1 or 2 - as you say it's not clear what to enter here.