topic Re: Restricting acces to vpn with certificate in SASE and Remote Access

Restricting acces to vpn with certificate

Ismael — Thu, 17 Mar 2022 10:59:15 GMT

Hello, I would like to restrict the authentication, only to a certain group of users defined in our active directory, to the vpn only with a certificate. And allow other users to continue to use username and password to access the vpn. It's possible? In my case we have version R80.30.

I know that I can restrict access to the vpn to two different groups in the "remote access" VPN community, but then I don't know how to make one of those groups access only via certificate

Thanks in Advance

Re: Restricting acces to vpn with certificate

PhoneBoy — Mon, 21 Mar 2022 16:24:00 GMT

You have to configure multiple authentication schemes as described here: https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RemoteAccessVPN_AdminGuide/Topics-VPNRG/User-and-Client-Authentication.htm?tocpath=User%20and%20Client%20Authentication%20for%20Remote%20Access%7C_____0#Multiple_Login_Options_for_R80.xx_Gateways

I don't believe you can prevent users from choosing "the wrong option" in this case.
Might be worth a TAC case just to confirm that, though.