https://community.checkpoint.com/t5/SASE-and-Remote-Access/Capsule-VPN-Authentication-methods/m-p/189090#M4643 <P>Right now users connect to the vpn via username and password (connected with AD onprem).<BR />Clients are managed via Intune and the vpn configuration policy is distributed (via capsules).<BR />Can I somehow add additional protection to make authentication more secure? perhaps by adding in addition to username and password an authentication certificate (which I can deploy on my clients via MDM).<BR />I would like to use capsules not going to change the current configuration much.</P> Wed, 09 Aug 2023 15:29:42 GMT michele 2023-08-09T15:29:42Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Capsule-VPN-Authentication-methods/m-p/189090#M4643 <P>Right now users connect to the vpn via username and password (connected with AD onprem).<BR />Clients are managed via Intune and the vpn configuration policy is distributed (via capsules).<BR />Can I somehow add additional protection to make authentication more secure? perhaps by adding in addition to username and password an authentication certificate (which I can deploy on my clients via MDM).<BR />I would like to use capsules not going to change the current configuration much.</P> Wed, 09 Aug 2023 15:29:42 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Capsule-VPN-Authentication-methods/m-p/189090#M4643 michele 2023-08-09T15:29:42Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Capsule-VPN-Authentication-methods/m-p/190395#M4644 <P>Unfortunately, this is not possible using Capsule VPN.<BR />To support additional (or other) authentication schemes, you will need to use the full VPN client.</P> Wed, 23 Aug 2023 22:13:23 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Capsule-VPN-Authentication-methods/m-p/190395#M4644 PhoneBoy 2023-08-23T22:13:23Z