topic Re: Push the windows Credentials to Endpoint Security client or vice versa in SASE and Remote Access

Push the windows Credentials to Endpoint Security client or vice versa

Xavier_FIQUET — Thu, 23 Jan 2020 17:07:40 GMT

Hello,

we are using endpoint security client with AD authentication.

we are working to avoid 2 times logins : one login/password to connect to the vpn , then the same for windows authentication.

is there a way to:

1- connect first to the vpn client with AD credential ( SDL) , then to "pass" the information to the windows login screen so that the user is logged ?

2- login to windows login screen and then push the credentials (script,windows credentials).. to the endpoint client that automatically log to the vpn gw ?

thank you in advance.

we are using E80.x and R80.20 platforms

regards

Re: Push the windows Credentials to Endpoint Security client or vice versa

Wolfgang — Thu, 23 Jan 2020 19:04:45 GMT

Xavier,

you should enable SecureDomainLogin on the VPN client.

With this you can start your VPN tunnel before you login to Windows and the credentials are passed to the windows logon.

There is no need to authenticate twice.

Wolfgang

Re: Push the windows Credentials to Endpoint Security client or vice versa

Xavier_FIQUET — Fri, 24 Jan 2020 13:09:02 GMT

hello Wolfgang,

thank you for your reply. SDL is already setup.

the user is connecting to the VPN client, then, he got the standard windows logon .. there is no "auto logon feature". is that something need to be actived somewhere ??

thank you,

best regards

xavier

Re: Push the windows Credentials to Endpoint Security client or vice versa

Wolfgang — Fri, 24 Jan 2020 13:45:02 GMT

Have a look at the client guide:

REMOTE ACCESS CLIENTS FOR WINDOWS 32/64-BIT E80.72 AND HIGHER

page 53, Secure Domain Logon (SDL)

Wolfgang

PS.: Do you have only VPN client installed or running with FDE in place ?

Re: Push the windows Credentials to Endpoint Security client or vice versa

Xavier_FIQUET — Fri, 24 Jan 2020 13:51:58 GMT

hello again,

the laptop is encrypted with bitlocker and the endpoint client E80.87 is installed.

maybe that's the reason ?

Re: Push the windows Credentials to Endpoint Security client or vice versa

Wolfgang — Fri, 24 Jan 2020 13:55:38 GMT

Not sure, but sounds the same:

Support for FDE SSO functionality and Explicit SDL on Endpoint Security Client

Wolfgang

Re: Push the windows Credentials to Endpoint Security client or vice versa

Andre91 — Tue, 06 Sep 2022 13:55:58 GMT

Hey Wolfgang,

I know this post is a bit older but we have the same problem here. Endpoint Security Client 86.50 with SDL enabled.

The icon appears on the windows logon screen. I can connect to the vpn, but after that my windows logon must be done seperately. FDE or bitlocker is not active on our test client.

Regards

Re: Push the windows Credentials to Endpoint Security client or vice versa

PhoneBoy — Tue, 06 Sep 2022 14:16:31 GMT

Auto-signin to Windows only works with FDE installed to the best of my knowledge.

Re: Push the windows Credentials to Endpoint Security client or vice versa

Andre91 — Thu, 08 Sep 2022 14:15:00 GMT

Thanks for the quick reply. Our notebooks don´t support FDE but BitLocker encryption. Is this equal?

With active BitLocker there is no improvement.

Regards

Re: Push the windows Credentials to Endpoint Security client or vice versa

PhoneBoy — Thu, 08 Sep 2022 17:46:08 GMT

The single sign on capabilities are tied to Check Point's implementation of Full Disk Encryption.