topic Re: VPN login using AD in SASE and Remote Access

VPN login using AD

kennethchow — Thu, 06 Oct 2022 03:39:03 GMT

Hi everyone,

I am first time to use the checkpoint firewall, the model is FW5200 the firmware is running R80.4. I would like to use the windows AD login to replace the personal certificate. Is that support or I need to configure the RADIUS server in exisitng environment?

Many thanks.

Re: VPN login using AD

PhoneBoy — Thu, 06 Oct 2022 13:54:32 GMT

Needs to be done with RADIUS.
Depending on the JHF level you’re on, if you’re using AzureAD, you can also leverage SAML as well.

Re: VPN login using AD

kennethchow — Fri, 07 Oct 2022 04:10:08 GMT

What is the JHF level? And which client I can use to connect our VPN server, it is because I have tested SecuRemote or Endpoint Security VPN but cannnot success.

Re: VPN login using AD

PhoneBoy — Fri, 07 Oct 2022 17:12:09 GMT

JHF = Jumbo Hotfix.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk72800
The requirements for Remote Access SAML support (needed to integrate with AzureAD) is here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk172909&partition=Advanced&product=Endpoint

More details about what exactly you've configured and the precise behavior you're seeing would help.
Screenshots are highly encouraged.