topic Re: Remote Access VPN with DynamicID in SASE and Remote Access

Remote Access VPN with DynamicID

lullejd — Tue, 18 Sep 2018 14:24:22 GMT

Hello,

I have a question on using DynamicID is the 2 factor authentication method to authenticate remote access vpn users.

All of CheckPoint's documentation is on the MobileAccess Blade when using DynamicID.

Basically, what we want to achieve is that a user can log in from his SecureClient VPN, using AD username and password, then he receives an SMS with OTP and can log in to VPN.

The thing is here. When setting up this on Checkpoint, We are not getting the prompt to enter the OTP password. Under 'Multiple Client Authentication Settings' in Gateway > VPN Clients > Authentication, we created a new authentication method which comprises of <Username and Password> followed by DynamicID.

Anyone else maybe using this scenario in his setup? Mobile access blade is not enabled in our case.

Thanks in advance.

Re: Remote Access VPN with DynamicID

PhoneBoy — Thu, 20 Sep 2018 03:53:17 GMT

Requires R80.10 and E80.85+ clients.

See: Mobile Access and VPN clients supporting Multiple Login Options

Re: Remote Access VPN with DynamicID

Dor_Marcovitch — Thu, 17 Jan 2019 07:52:22 GMT

hey,

will it also support authentication with certificate & SMS ?

thanks

Re: Remote Access VPN with DynamicID

lullejd — Thu, 17 Jan 2019 08:09:34 GMT

According to this SK: Multiple Authentication Schemes for Mobile Access / Remote Access

It is not supported.

Re: Remote Access VPN with DynamicID

Superpinky12 — Fri, 29 May 2020 00:52:47 GMT

Hi. I configured Dynamic Id trough mail. Mobile Access trough portal i receive mail with code. But when connect from Endpoint security cantor receive mail. The conf is the same for both.