topic Re: cert for vpn user using Security Management Portal for smb in Spark Firewall (SMB)

cert for vpn user using Security Management Portal for smb

TOM_MORAN — Wed, 18 Mar 2020 14:24:27 GMT

Hi my customer has a 1490 gaia embedded , i know if centrally managed you can delpoy a cert for the ipsec client vpn.

I know if locally managed you cannot.

But if you are using Security Management Portal for smb can you delpoy a cert for the ipec vpn client ?

Any help is appreciated

Re: cert for vpn user using Security Management Portal for smb

PhoneBoy — Tue, 24 Mar 2020 00:17:02 GMT

For what purpose specifically?

Re: cert for vpn user using Security Management Portal for smb

G_W_Albrecht — Wed, 25 Mar 2020 09:17:54 GMT

See Check Point 1400 Appliances Locally Managed Administration Guide R77.20.87 p.152 for using uploaded certificates!

Re: cert for vpn user using Security Management Portal for smb

G_W_Albrecht — Wed, 25 Mar 2020 15:46:58 GMT

I have also found in sk105380 Check Point R77.20.xx for 600 / 700 / 1100 / 1200R / 1400 / 910 Appliance Features and Known Limitations:

When you connect to the appliance with Remote Access VPN, the appliance only uses the default internal certificate.

Re: cert for vpn user using Security Management Portal for smb

TOM_MORAN — Wed, 25 Mar 2020 15:53:36 GMT

Hi many thanks for help, the customer uses certificates for vpn users on R80.10. but is GAIA embedded that option is not supported, I reached to TAC and got it confirmed.

what we are looking at now is 2FA

all the help is appreciated

Re: cert for vpn user using Security Management Portal for smb

PhoneBoy — Thu, 26 Mar 2020 06:00:27 GMT

It'd probably work if the SMB appliance were centrally managed but this is not supported with local management.

Re: cert for vpn user using Security Management Portal for smb

TOM_MORAN — Fri, 10 Apr 2020 07:39:58 GMT

thanks for the help appreciated