topic Re: How to Configure Check Point Endpoint Security E88.60 Remote Access VPN to Use Azure AD or CA? in Spark Firewall (SMB)

How to Configure Check Point Endpoint Security E88.60 Remote Access VPN to Use Azure AD or CA?

wjong — Tue, 18 Feb 2025 06:46:07 GMT

Hello,

I am currently using Check Point Endpoint Security E88.60 for Remote Access VPN, but whenever I try to connect, I'm always prompted to enter my username and password.

I would like to configure the VPN client to authenticate users using either Azure AD or Certificate Authentication (CA) instead of the standard username/password method.

Could anyone guide me on how to set this up? Specifically:

How do I integrate Azure AD for authentication, or
How can I configure Certificate-based Authentication (CA) for VPN access?

Any guidance or step-by-step instructions would be greatly appreciated!

Thank you in advance!

Re: How to Configure Check Point Endpoint Security E88.60 Remote Access VPN to Use Azure AD or CA?

PhoneBoy — Tue, 18 Feb 2025 21:23:24 GMT

Both options are supported.
Refer to the relevant product documentation linked below.

Re: How to Configure Check Point Endpoint Security E88.60 Remote Access VPN to Use Azure AD or CA?

wjong — Wed, 19 Feb 2025 00:44:53 GMT

My apologies as I did not mention that I'm using Quantum Spark 1575 appliance as the firewall and Remote Access VPN. Not R81.20

Re: How to Configure Check Point Endpoint Security E88.60 Remote Access VPN to Use Azure AD or CA?

PhoneBoy — Wed, 19 Feb 2025 00:51:01 GMT

I don't believe you can do certificates from a locally managed SMB appliance.
However, SAML support for locally managed SMB appliances is supported from R81.10.15: https://sc1.checkpoint.com/documents/SMB_R81.10.X/CLI/EN/Content/Topics/Configuring-SAML-Identity-Provider.htm

Re: How to Configure Check Point Endpoint Security E88.60 Remote Access VPN to Use Azure AD or CA?

wjong — Wed, 19 Feb 2025 01:13:23 GMT

I'm rather new to this appliance.

Model

1575 Appliance

Version

R81.10.10 (996002993)

As the version is currently as of above,

are there any other methods which can be used to authenticate without typing Username and Password? (Refer to attached image)

Re: How to Configure Check Point Endpoint Security E88.60 Remote Access VPN to Use Azure AD or CA?

PhoneBoy — Wed, 19 Feb 2025 15:54:57 GMT

Those options are only available if you are managing your SMB with a Smart-1 appliance.
Otherwise, you are limited to passwords or, upon upgrading your firmware to R81.10.15, you can also leverage Azure/Entra ID.

Re: How to Configure Check Point Endpoint Security E88.60 Remote Access VPN to Use Azure AD or CA?

G_W_Albrecht — Thu, 20 Feb 2025 08:34:08 GMT

Best you use 2FA together with UN / PW

Re: How to Configure Check Point Endpoint Security E88.60 Remote Access VPN to Use Azure AD or CA?

wjong — Fri, 21 Feb 2025 05:28:39 GMT

Thks for the suggestion. We are planning to upgrade the firmware to R81.10.15, so that we are able to leverage Azure/Entra ID.