topic Re: Integration Microsoft Entra(from Cisco) with Checkpoint in SASE and Remote Access

Integration Microsoft Entra(from Cisco) with Checkpoint

Saranya_0305 — Wed, 10 Sep 2025 08:40:32 GMT

Dear Mates,

We have Management Server running on the R81.20 version and Security Gateways with the R81.10 version.

Currently we are using CiscoDuo for MFA and now we want to move to Microsoft Entra for Remote Access VPN Users.

We are now currently using Identity Awareness Blade from local AD for all users.

As per the below document and video we have configured on Azure side and created Azure AD and Identity Provider objects in Smartconsole.

Can you please suggest me for how to proceed for Remote Access VPN process?

If we do the integration what will be the impact on the local users like pro and cons?

Below is the current configuration screenshots in firewall.

Regads,

Saranya

G_W_Albrecht — Wed, 10 Sep 2025 09:26:12 GMT

@PhoneBoy can you move this to Remote Access VPN ?

PhoneBoy — Wed, 10 Sep 2025 17:00:56 GMT

I'd start with this SK, which lists the various requirements for using this feature: https://support.checkpoint.com/results/sk/sk172909
You can permit both authentication methods to be used.

the_rock — Thu, 11 Sep 2025 00:25:46 GMT

The sk @PhoneBoy provided is exactly what you need to follow.

Andy