topic Re: Remote access Menu under Global Properties in SASE and Remote Access

Remote access Menu under Global Properties

Ihenock1011 — Tue, 10 Sep 2024 09:45:00 GMT

Hi All,

We have CP R81.10 security gateway, I have come across the 'Remote Access' menu under Global Properties. This menu contains several settings such as 'VPN - Authentication' and 'VPN - Advanced,' among others. Could you explain the purpose of these settings and the impact of modifying them on the system's security and functionality?

Thanks,

Re: Remote access Menu under Global Properties

AkosBakos — Tue, 10 Sep 2024 10:20:59 GMT

Hi @Ihenock1011

You can set various things here. To determine which setting change will ruin your Remote Access gateway depends on what you set.

Please narrow down your question, and we will help.

Akos

Re: Remote access Menu under Global Properties

Ihenock1011 — Tue, 10 Sep 2024 11:16:23 GMT

Thanks @AkosBakos for your response. Most specifically I want to know VPN Authentication Tab which holds Encryption Method, Encryption Algorithms, Support Authentication note that I have radius server for remote access Authentication.

Re: Remote access Menu under Global Properties

AkosBakos — Tue, 10 Sep 2024 12:04:08 GMT

Hi @Ihenock1011

If you want to know the performance impact of changing algorithms this sk useful. I think this is a most important thing in the RemoteAccess GW's life.:

https://support.checkpoint.com/results/sk/sk105119

From the help:

Support Authentication Methods

Pre-Shared Secret - the user password is specified in the Authentication tab in the user's IKE properties (in the user properties window: Encryption tab > Edit).
Public Key Signatures - enable Public Key in the Authentication tab in the user's IKE properties. If the certificate presented by the user is issued by the Internal CA, generation of the user's certificate is done in the Certificate tab of user properties (in the user properties window: Encryption tab > Edit).
Supports Legacy Authentication for SecureClient- This includes Hybrid mode which means other VPN authentication methods, as specified in the Authentication tab of the user properties.
Support Legacy EAP - EAP stands for Extensible Authentication Protocol.
Support L2TP with Pre-Shared Key - Use a centrally managed pre-shared key for IKE. Type in the pre-shared key.

Re: Remote access Menu under Global Properties

the_rock — Tue, 10 Sep 2024 12:06:43 GMT

SK @AkosBakos mentioned is your best reference mate. But, having said that, I would NOT modify those settings you mentioned in global properties. I once had customer call me in panic saying, ra is broken, vpn tunnels are broken, I call her, find out she changed bunch of those settings because she read online they can help. Well, needless to say, I told her to revert it and all started working again.

Im sure she had lots of explaining to do with her boss after lol

Anyway, UNLESS there is a good reaosn to change them, I would not bother, just my personal opinion.

Andy