topic Re: VPN Always on in SASE and Remote Access

VPN Always on

handiansudianto — Tue, 28 Nov 2023 23:26:34 GMT

How we can implement Checkpoint remote access VPN to always on or auto connect?

Trying change authentication method using 'username password' and 'certificate' but for some hour (8 hours) the vpn is disconnected and should reenter the password.

Re: VPN Always on

Chris_Atkinson — Tue, 28 Nov 2023 23:44:19 GMT

Depending on your client flavor, see Global Properties:

Re: VPN Always on

handiansudianto — Wed, 29 Nov 2023 02:26:16 GMT

if we increate the interval we still need to reauthenticate by typing the username and password on the client.

What i want is the vpn always ON every time, so if need to reauthenticate this process can be done automatically without human intervention.

Re: VPN Always on

PhoneBoy — Wed, 29 Nov 2023 02:43:27 GMT

Certificate-based authentication should not require entry of a password if the certificate is stored in the computer's Certificate Store for Windows and Mac.

Re: VPN Always on

the_rock — Wed, 29 Nov 2023 02:47:58 GMT

Change connect mode to always.

Andy

Re: VPN Always on

handiansudianto — Wed, 29 Nov 2023 02:51:20 GMT

i already test using certificate p12 but still need the password to enabling the vpn

Re: VPN Always on

handiansudianto — Wed, 29 Nov 2023 02:52:30 GMT

yes connect mode already set to always but the vpn need authenticate by enter the password both for 'user & password' and 'certificate p12' auth method.

Re: VPN Always on

PhoneBoy — Wed, 29 Nov 2023 02:53:22 GMT

Do you have password caching enabled in Global Properties > Remote Access > Endpoint Connect?

Re: VPN Always on

the_rock — Wed, 29 Nov 2023 02:57:32 GMT

Make sure password cashing is enabled as Phoneboy said, as well as try set re-authenticate setting to 1440 mins (24 hours)

Andy

Re: VPN Always on

handiansudianto — Wed, 29 Nov 2023 02:57:33 GMT

it's disable, will try to enable and let see if the vpn can always on or not after enabling this.