topic Re: SAML FOR CAPSULE VPN in SASE and Remote Access

SAML FOR CAPSULE VPN

ikokkoris — Fri, 10 Nov 2023 07:31:00 GMT

Hello,

I have seen that Capsule VPN does not support SAML authentication in R81.10

Is it going to been solved in R81.20 ?

Re: SAML FOR CAPSULE VPN

Chris_Atkinson — Fri, 10 Nov 2023 22:17:10 GMT

Suspect we will know more only post release of R82 and/or a compatible Capsule client version.

Re: SAML FOR CAPSULE VPN

PhoneBoy — Fri, 10 Nov 2023 14:57:00 GMT

Actually, R81.10 with a recent JHF has support for this on the gateway side: https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10/R81.10/R81.10-List-of-all-Resolved-Issues.htm?Highlight=Capsule
It needs a compatible client version, which I don’t believe is released yet.
It’s also not in other JHF branches yet that I’ve seen.

Your best bet is to reach out to your local Check Point office and have them reach out to our Solution Center.
I suspect this functionality is considered a customer release and you may be able to obtain access to it.

Re: SAML FOR CAPSULE VPN

ikokkoris — Wed, 22 Nov 2023 20:43:14 GMT

Hello,

Below the response from local office.

I have to wait until Take 113 for R81.10 is recommended to solve this one.

There is no info yet for R81.20 (in case of an upgrade).

Re: SAML FOR CAPSULE VPN

PhoneBoy — Thu, 23 Nov 2023 14:49:16 GMT

That doesn’t speak to the required Capsule VPN client version, which I assume requires an update to support this authentication flow.

Re: SAML FOR CAPSULE VPN

ikokkoris — Thu, 23 Nov 2023 15:00:42 GMT

You mean both update of capsule VPN version and Take 113?

Re: SAML FOR CAPSULE VPN

PhoneBoy — Tue, 28 Nov 2023 22:41:05 GMT

Based on past experience, more than likely.

Re: SAML FOR CAPSULE VPN

PhoneBoy — Mon, 08 Jan 2024 23:39:11 GMT

Looks like support was added in JHF 43:

Re: SAML FOR CAPSULE VPN

ikokkoris — Tue, 09 Jan 2024 09:02:38 GMT

Hello,

I have tested with R81.10 and Take 129 and it works properly, so JHF 43 should be fine too.

Thank you

Re: SAML FOR CAPSULE VPN

Chris_Atkinson — Thu, 18 Jan 2024 14:52:38 GMT

sk181494 was updated