topic Re: How to Configure MFA for Remote VPN AD users integrating with Azure Identity Spark 1600 Applianc in SASE and Remote Access

How to Configure MFA for Remote VPN AD users integrating with Azure Identity Spark 1600 Appliance

Balakrishna_Med — Sat, 17 Dec 2022 15:41:07 GMT

Hi,

Can anyone help me to configure MFA for our Remote SSL VPN users.

we have on premises Active Directory and integrated with Spark 1600 Appliance and working properly.

but now management wants to go the two-factor authentication using Azure Identity service.

Please help me

Regards

Balakrishna Medikonda

Re: How to Configure MFA for Remote VPN AD users integrating with Azure Identity Spark 1600 Applianc

Chris_Atkinson — Sun, 18 Dec 2022 00:41:31 GMT

Locally or centrally managed appliance?

It was possible previously only via Radius (sk114263). See the Microsoft guidance here:

https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/auth-radius

Note R81.10.05 will introduce additional MFA options.

Currently native integration to Azure AD / SAML isn't possible per sk178604.

(Please discuss this with your local SE as an RFE.)

Re: How to Configure MFA for Remote VPN AD users integrating with Azure Identity Spark 1600 Applianc

PhoneBoy — Thu, 26 Jan 2023 19:23:25 GMT

Apparently, support for this integration has been added in recent SMB firmware releases.
However, it has not been formally tested as of yet and we are looking for folks to assist in testing this.
If you're interested, please let @Dafna and I know.

Re: How to Configure MFA for Remote VPN AD users integrating with Azure Identity Spark 1600 Applianc

ArsathParves1 — Mon, 30 Oct 2023 12:03:49 GMT

So, Spark appliance will be able to integrate with Azure AD for Identity awareness and SSO now?

Re: How to Configure MFA for Remote VPN AD users integrating with Azure Identity Spark 1600 Applianc

PhoneBoy — Mon, 30 Oct 2023 14:44:32 GMT

Still not supported per https://support.checkpoint.com/results/sk/sk178604