topic Remote Access VPN - Always On in SASE and Remote Access

Remote Access VPN - Always On

Ob1lan — Mon, 14 Mar 2022 15:09:59 GMT

Hi,

We would like to consider implementing an Always On solution. We are now using Check Point VPN clients (standalone) on Windows and MacOS devices.

The main authentication method is currently username/password, but we are phasing to SAML authentication (Okta).

Would Check Point support an Always On solution given those criterias ? Does a guide exists ?

Thanks in advance for your help.

Regards,

Antoine

Re: Remote Access VPN - Always On

G_W_Albrecht — Mon, 14 Mar 2022 15:50:16 GMT

CP Always On is mostly implemented using the RA client AutoConnect feature. Second method is Machine Authentication, connecting to VPN even before user login. For SAML, see sk172909: SAML authentication in Remote Access VPN clients

Re: Remote Access VPN - Always On

Ob1lan — Mon, 14 Mar 2022 15:56:00 GMT

Thanks for your reply. So if we want a solution that provides both autoconnect and autologin, we only have certificates authentication, right ?

Currently SAML auth works great, but requires user interraction. The idea of our management is to have something entirely transparent to the user.

Thanks.

Re: Remote Access VPN - Always On

G_W_Albrecht — Mon, 14 Mar 2022 16:00:16 GMT

Also Certificate Authentication has both, as long as the Cert password is cached ! I do only need to select connect in menue, and also using AutoConnect, no user interaction is needed.

Re: Remote Access VPN - Always On

handiansudianto — Tue, 28 Nov 2023 23:45:59 GMT

how we can cache the password?

Re: Remote Access VPN - Always On

G_W_Albrecht — Wed, 29 Nov 2023 08:24:04 GMT

sk44073: Password caching with Endpoint Security VPN

sk114584: How to disable password saving for Endpoint Security VPN connections

Remote Access VPN Clients for Windows Administration Guide - Configuring Username and Password caching for ATM machines