topic Re: SAML Authentication on SMBs for RA-VPN in Spark Firewall (SMB)

SAML Authentication on SMBs for RA-VPN

Soroosh — Fri, 31 Oct 2025 12:16:17 GMT

Dear Mates,
I recently tried to configure an SMB (1535) with R81.10.17 to use EntraID for RA-VPN authentication, but the login page on the gateway does not respond.
The Remote Access VPN Remote Access port is 981.
2. The GUI web port is 2007.
The rest of the configuration for Identity Provider is visible in the screenshots.
What could be causing the gateway to not respond to the login page?

Thanks in advance & Best Regards

Soroosh

Re: SAML Authentication on SMBs for RA-VPN

Chris_Atkinson — Fri, 31 Oct 2025 13:24:57 GMT

Below suggests it's not supported to change the default port.

SMBGWY-12300 In Azure AD, authentication with SAML fails when you change the default port for Remote Access VPN.

Workaround: Use the default port 443.

Re: SAML Authentication on SMBs for RA-VPN

Soroosh — Fri, 31 Oct 2025 13:08:58 GMT

Hi,
Do you mean the Remote Access Port or Web GUI Port?

Re: SAML Authentication on SMBs for RA-VPN

Chris_Atkinson — Fri, 31 Oct 2025 13:28:41 GMT

Remote Access port, refer also:

https://community.checkpoint.com/t5/Remote-Access-VPN/central-managed-SMB-Appliance-1900-and-Azure-Entra-ID-for-RAS/m-p/253427

https://community.checkpoint.com/t5/SMB-Gateways-Spark/Spark-Entra-ID-SAML-authentication-for-RA-VPN-illustrated/td-p/229490

Re: SAML Authentication on SMBs for RA-VPN

Soroosh — Tue, 04 Nov 2025 10:13:22 GMT

Thanks.

I changed the RA-VPN port back to its default value of 443, and now it works perfectly.

Regards