topic Re: Negotiate to site failed - Azure SAML in SASE and Remote Access

Negotiate to site failed - Azure SAML

shantilalSuthar — Fri, 01 Sep 2023 14:42:48 GMT

Hi Guys, Have integrated Azure SAML with SSLVPN. IdP authentication is working fine but VPN client showing negotiate to site failed.

I have used local users in remote access security policy

Kindly suggest on the same.

PhoneBoy — Fri, 01 Sep 2023 16:45:36 GMT

Version/JHF of gateway?
Which VPN clients and versions?
Also, I’d start with this SK: https://support.checkpoint.com/results/sk/sk128652

the_rock — Fri, 01 Sep 2023 17:11:37 GMT

That message is super generic, we would need to some some logs/debugs to get better idea.

Andy

shantilalSuthar — Sat, 02 Sep 2023 04:28:40 GMT

R81.20 SP & Take 24.

E87.31 VPN client version.

Do I need to integrate Azure AD with checkpoint ? Is it mandatory.

shantilalSuthar — Sat, 02 Sep 2023 04:29:03 GMT

what logs are required ?

PhoneBoy — Tue, 05 Sep 2023 18:50:05 GMT

If you want to use SAML for Remote Access authentication, yes, it needs to be integrated as described in the documentation.

the_rock — Tue, 05 Sep 2023 18:55:45 GMT

I attached 2 documents that were always there in the sk previously, but it was modified at some point.

Andy