2FA as a secondary authentication in Mobile Access

Nischit — Fri, 17 Apr 2020 17:15:00 GMT

Hi,

I have configured mobile access on my CP Gateway. I want the primary authentication for the SSL VPN users to be locally created 'Username and Password' on the Checkpoint GW and the secondary authentication to be 2FA (For eg. Duo). So, there will be 2 authentication factors 'Username and Password' and 'Radius'. Has anyone tried this?

For this, I have configured Multiple authentications on Mobile Access > Authentication. Please refer to the attached screenshot.

If the primary authentication was through Radius Server or AD, then it won't be a problem as I only have to select my Authentication method on Mobile Access as 'Radius' and my 2FA (Duo) would handle AD or Radius authentication and once verified, it generates a token or sends a push notification.

Re: 2FA as a secondary authentication in Mobile Access

PhoneBoy — Mon, 20 Apr 2020 00:48:23 GMT

That should generally be supported.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk86240

Re: 2FA as a secondary authentication in Mobile Access

Nischit — Mon, 20 Apr 2020 14:38:11 GMT

Hi,

Thank you for the response.

I will follow this SK.

topic 2FA as a secondary authentication in Mobile Access in SASE and Remote Access

2FA as a secondary authentication in Mobile Access

Re: 2FA as a secondary authentication in Mobile Access

Re: 2FA as a secondary authentication in Mobile Access