topic Re: RSA secureID authentication for Mobile access blade in SASE and Remote Access

RSA secureID authentication for Mobile access blade

Gaurav_Pandya — Sat, 04 Apr 2020 05:58:36 GMT

Hi,

I have mobile access VPN enabled with LDAP authentication. Now we want to add 2 factor authentication with RSA secure ID.

I know that we need to import sdconf.rec file and change authentication setting in mobile access. I have gone through below documents.

file:///C:/Users/GP49127/AppData/Local/Microsoft/Windows/INetCache/Content.Outlook/8UP6KRWI/Check_Point_Secure_Gateway_R80_10_RSA_SecurID_Access.pdf

Our requirement is to first test with only one LDAP group. How we can achieve this with only specific LDAP group while others will continue with older mechanism.

Re: RSA secureID authentication for Mobile access blade

PhoneBoy — Sun, 05 Apr 2020 03:24:55 GMT

You need to create an authentication method specifically for that group of users.
Screenshots here: https://community.checkpoint.com/t5/Remote-Access-Solutions/Remote-Access-improvements/m-p/80803#M3009

Re: RSA secureID authentication for Mobile access blade

Gaurav_Pandya — Sun, 05 Apr 2020 08:41:05 GMT

Thanks PhoneBoy.

I have created multiple authentication in mobile access blade as you suggested.

But how I can map different authentication profile to different user. as there is no control over user creation, it is directly fetched from AD.

Re: RSA secureID authentication for Mobile access blade

PhoneBoy — Sun, 05 Apr 2020 19:18:09 GMT

You do it by LDAP group, which you can define as shown in the first screenshot in the post I linked.

Re: RSA secureID authentication for Mobile access blade

Gaurav_Pandya — Tue, 07 Apr 2020 11:24:51 GMT

Oh ok. Go it

I will check this.