topic Re: Capsule VPN and Multiple Authentication Methods errors in SASE and Remote Access

Capsule VPN and Multiple Authentication Methods errors

Andy_Battle — Tue, 02 May 2023 10:18:33 GMT

Gateway Version - R81.10
Management Version - R81.10

Using Capsule Client VPN on Windows 10

Was using LDAP Authentication via Legacy Authentication (Defined on user record)
Have just enabled RADIUS based VPN with Microsoft Azure MFA using Multiple Authentication Client Settings.

Any client that has a newly defined profile is working fine

Any client where we delete and re-create profile is fine.

Any client that was previously deployed is erroring immediately

"Cannot connect to VPN XXX"

"Arg_NullReferenceException"

Running latest capsule version (v1.1.18) and have reviewed https://support.checkpoint.com/results/sk/sk177368

Any

Re: Capsule VPN and Multiple Authentication Methods errors

PhoneBoy — Tue, 02 May 2023 13:01:55 GMT

Recommend a TAC case: https://help.checkpoint.com

Re: Capsule VPN and Multiple Authentication Methods errors

the_rock — Tue, 02 May 2023 13:17:15 GMT

I think there is an easy fox for this. Can you double click in radius auth entry and send screenshots of how its configured? I know there is sessing there that affects this behavior, seen ot before. Please blur out any sensitive data.

Andy

Re: Capsule VPN and Multiple Authentication Methods errors

Andy_Battle — Wed, 03 May 2023 01:30:35 GMT

Here is the Radius Properties

Re: Capsule VPN and Multiple Authentication Methods errors

the_rock — Wed, 03 May 2023 02:20:43 GMT

I was more interested in seeing whats under user directories, I think thats the key here.

Re: Capsule VPN and Multiple Authentication Methods errors

Andy_Battle — Wed, 03 May 2023 02:29:24 GMT

no worries

Re: Capsule VPN and Multiple Authentication Methods errors

the_rock — Wed, 03 May 2023 02:36:02 GMT

Thats your problem, that setting. Make sure manual is selected and proper ldap unit and internal users, if there are any.

Andy

Re: Capsule VPN and Multiple Authentication Methods errors

Chris_Atkinson — Thu, 04 May 2023 11:01:20 GMT

Hey @Andy_Battle

Did you manage to resolve the issue or is it ongoing?

Re: Capsule VPN and Multiple Authentication Methods errors

the_rock — Thu, 04 May 2023 13:17:54 GMT

Thanks for following up @Chris_Atkinson . I assumed no news is good news (as they say), but better to confirm :). @Andy_Battle , let us know the outcome mate.

Cheers,

Andy

Re: Capsule VPN and Multiple Authentication Methods errors

michele — Thu, 22 Jun 2023 10:11:21 GMT

Hi, I would also like to implement this solution as I would not like to go and install checkpoint client but use capsules (but increasing the security level=not just user and password).
Were you able to solve the problem?
Can you give me a tip on how to do it?

Re: Capsule VPN and Multiple Authentication Methods errors

PhoneBoy — Thu, 22 Jun 2023 17:10:30 GMT

Only one authentication factor is supported in the Capsule VPN clients.
Support for additional factors is currently not planned and would need to be addressed as part of an RFE with your local Check Point office.

Re: Capsule VPN and Multiple Authentication Methods errors

michele — Thu, 22 Jun 2023 17:35:57 GMT

Okay, but as a single factor can I use an alternative to username and password? Certificate?

Re: Capsule VPN and Multiple Authentication Methods errors

PhoneBoy — Thu, 22 Jun 2023 17:53:36 GMT

Yes, you can use a certificate.
That said, you may need to adjust your configuration to support this: https://support.checkpoint.com/results/sk/sk113401

Re: Capsule VPN and Multiple Authentication Methods errors

michele — Thu, 22 Jun 2023 18:30:09 GMT

Do I have to use the checkpoint ca? Can I use mine on the cloud (scepman)?

Re: Capsule VPN and Multiple Authentication Methods errors

PhoneBoy — Fri, 23 Jun 2023 14:41:01 GMT

As far as I know you can.