topic VPN RA login before Windows login on Windows 10 in SASE and Remote Access

VPN RA login before Windows login on Windows 10

marcinw — Mon, 08 Feb 2021 13:28:25 GMT

In short the issue is when user is trying to log to our domain by VPN Remote Access, he doesn’t pick up Active Directory membership policies. There is no problem with VPN login. It looks like VPN login takes place before Windows login however doesn’t work. I know that this issue maybe is more related to Windows than to Checkpoint, but dos anyone have come across this problem and have idea how to overtake this issue ? Gaia version 77.30, RA client 83.20 .Thank you

Re: VPN RA login before Windows login on Windows 10

PhoneBoy — Wed, 10 Feb 2021 16:27:01 GMT

Have you configured Secure Domain Login?
That said, I don't believe this is strictly required to retrieve AD membership policies.

Re: VPN RA login before Windows login on Windows 10

marcinw — Wed, 10 Feb 2021 16:30:53 GMT

Yes, however we have to tick SDL manually in the client, the question is, can it be ticked via GPO ? We have opened a ticket with TAC.

Re: VPN RA login before Windows login on Windows 10

PhoneBoy — Wed, 10 Feb 2021 16:35:11 GMT

The following thread may be helpful: https://community.checkpoint.com/t5/Remote-Access-VPN/Checkpoint-Mobile-VPN-enable-SDL-programmatically/m-p/107367#M4450