topic Re: Quantum Spark 1550 - Two Factor Authentication in Spark Firewall (SMB)

Quantum Spark 1550 - Two Factor Authentication

babicmilan — Tue, 11 Jun 2024 06:35:57 GMT

Hello, I want to configure 2FA Two Factor Authentication for Remote Access VPN users. I have some internal users created on Check Point 1550 gateway and AD group where are some users which use AD credentials to authenticate. Attached pictures for clarity.

For internal users I have option to configure Email, Phone Number, ...

Where I configure that options (Email, Phone Numbers) for AD users to use Two Factor Authentications?

I suppose on Microsoft AD server?

Re: Quantum Spark 1550 - Two Factor Authentication

G_W_Albrecht — Tue, 11 Jun 2024 08:39:06 GMT

See https://sc1.checkpoint.com/documents/SMB_R81.10.X/AdminGuides_Locally_Managed/EN/Content/Topics/Configuring-Remote-Access-Blade.htm?Highlight=Two%20Factor%20Authentication

Re: Quantum Spark 1550 - Two Factor Authentication

babicmilan — Tue, 11 Jun 2024 10:11:04 GMT

Hello, I saw it but there is no explanation where to put informations like Email, Phone Number for AD users so that AD users use Two Factor Authentications when logged over Remote Access VPN?

I suppose it must be on Microsoft AD domain controller. Am I right?

Re: Quantum Spark 1550 - Two Factor Authentication

G_W_Albrecht — Tue, 11 Jun 2024 10:16:44 GMT

All AD users are created or changed on MS DC, so it must be defined on AD of course...

Re: Quantum Spark 1550 - Two Factor Authentication

babicmilan — Wed, 12 Jun 2024 07:12:59 GMT

Thank you very much for explanation. I have some issues regarding 2FA for AD users, for local users I get passkey on email and SMS, for AD users I get passkey only on email. I don't know where is the problem Check Point gateway or MS DC.

My next question, is it possible to add two AD servers for the same domain for example primary and secondary. When I try to add secondary one I get some Invalid input that "Domain already exists" (that means I can't add two AD servers for same domain with different IP addresses). Attached pictures.