topic Re: SSLVPN with Google Auth and ADselfservice as MFA in SASE and Remote Access

SSLVPN with Google Auth and ADselfservice as MFA

Jonathan — Mon, 15 Apr 2024 06:58:46 GMT

Hi,

We use two methods for remote access VPN connections (R81.10):

1. Checkpoint Mobile Client for VPN connections using certificates.
2. Checkpoint SSLVPN, with login method of AD user + DynamicID.

For the SSLVPN, we want to ADD ANOTHER login method of AD user + Google Auth, and we want to utilise ADSelfservice solution for this, which uses Windows NPS as a RADIUS server:
https://www.manageengine.com/products/self-service-password/multi-factor-authentication-for-secured-vpn1.html

I've read several Checkpoint guides of how to set up RADIUS server, which involves, among other things, changing attributes in GUIdbedit and assigning the RADIUS server to the gateway.
I'm affraid these changes will affect the currently active login methods (Checkpoint Mobile and SSLVPN).

Can anyone shed some light about this process?
Also, does anyone has any experience with the ADSelfservice solution?

Thanks

Re: SSLVPN with Google Auth and ADselfservice as MFA

G_W_Albrecht — Mon, 15 Apr 2024 10:30:24 GMT

Why not contact CP TAC to get help here?

Re: SSLVPN with Google Auth and ADselfservice as MFA

Jonathan — Mon, 15 Apr 2024 12:04:03 GMT

I usually get a lot of help and good advises from this community, so I thought of trying here first 😁

Re: SSLVPN with Google Auth and ADselfservice as MFA

PhoneBoy — Mon, 15 Apr 2024 15:48:37 GMT

Am not familiar with ADselfservice.
Do they provide a specific integration guide for Check Point that we can review?

I assume as long as both solutions don't require conflicting RADIUS attributes to be defined, it should work.

Re: SSLVPN with Google Auth and ADselfservice as MFA

G_W_Albrecht — Tue, 16 Apr 2024 09:00:46 GMT

I would rather do both 8)