topic Re: Checkpoint 1490 - Client Authentication not supported in Spark Firewall (SMB)

Check Point 1490 - Client Authentication not supported

vijayreddy — Sun, 12 May 2019 20:41:24 GMT

Recently purchased 1490'S and while testing found out that Client authentication is not supported.

I am using centrally managed console to manage 1490 cluster's .

Error received while installing the policy: Security policy cannot be installed because client, Session or user authentication is not supported on checkpoint small office appliances

Any workaround for the client authentication ?

Re: Checkpoint 1490 - Client Authentication not supported

PhoneBoy — Tue, 07 May 2019 23:41:12 GMT

Client Authentication has never been supported on the SMB appliances.
Further, it's more or less deprecated in R80.x on regular gateways as well.
Generally speaking, you should be using Identity Awareness.
If you can explain your exact use case for Client Auth, I can provide more specific advice.

Re: Checkpoint 1490 - Client Authentication not supported

vijayreddy — Thu, 09 May 2019 19:47:14 GMT

Thank you !
need particular group of users to access the isolated network with the help of client auth through radius authentication but anyways Identity awareness does have the same functionality through browser based authentication and other thing that varies from client auth is enabling the IA software blade on the firewall.

Re: Checkpoint 1490 - Client Authentication not supported

PhoneBoy — Thu, 09 May 2019 20:46:41 GMT

You've got the basic idea.
You can use Captive Portal to acquire the identity of the user.
Once the identity is acquired, and you have the appropriate rules in place, then the users should be able to get to the isolated network.
User experience is obviously different, of course.