topic Hardware token with certificates for Mobile Access Portal in SASE and Remote Access

Hardware token with certificates for Mobile Access Portal

Herman — Mon, 02 Aug 2021 09:53:31 GMT

Hi there,

it's possible use hardware token with certificates for automatic authentication to Mobile Access Portal?

If not, please, can anybody explain me how works authentication with certificate, what should be configured?

Re: Hardware token with certificates for Mobile Access Portal

PhoneBoy — Mon, 02 Aug 2021 16:15:55 GMT

The main things needed on the gateway are:

The certificate authority
A way to map the certs to individual users (done via LDAP).

I’d start here: https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_MobileAccess_AdminGuide/Content/Topics-MABG/User-Authentication.htm?Highlight=Certificate

Re: Hardware token with certificates for Mobile Access Portal

Herman — Mon, 30 Aug 2021 07:49:55 GMT

Thank for advice!
I read this document and also asked this question TAC Checkpoint.
The first thing that I was additionally recommended to read is the order of factors for 2FA : https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk86240#Configuring%20Two%20Authentication%20Schemes%20per%20Realm
The second is that this option is not possible (if it is not hardware token for SecurID)