topic Re: Checkpoint 1400 - Change Browser Based Auth Portal Certificate when using SmartProvisioning in Spark Firewall (SMB)

Checkpoint 1400 - Change Browser Based Auth Portal Certificate when using SmartProvisioning

Us4r — Thu, 17 Dec 2020 20:11:08 GMT

Hello,

at the Moment I'm configuring Identity Awarenes on Checkpoint 1400 Appliances which are managed via SmartProvisioning.

Is there any Chance to Change the Portal Certificate which will be automatically used for the Web Portal?

It allways automatically uses the created IPSEC VPN - Certificate which is very unusful because it was generated for the wrong common Name (<Gatewayname> VPN Certificate instead of the dynamic-IP).

It would be really great if there is some CLI command or anything else how I can use there my own Certificate for alle Provisioned appliances. Users won't get a Certificate error message when logging in via the WebPortal...

Thanks.

Regards

Florian

Re: Checkpoint 1400 - Change Browser Based Auth Portal Certificate when using SmartProvisioning

G_W_Albrecht — Fri, 18 Dec 2020 09:15:26 GMT

Are you talking about the Hotspot portal, UserCheck or the WebGUI ? And what about recreating a correct Internal Certificate ?

Re: Checkpoint 1400 - Change Browser Based Auth Portal Certificate when using SmartProvisioning

Us4r — Fri, 18 Dec 2020 13:12:56 GMT

I'm talking about the webportal certificate which will be used from Identity Awareness in case of activated User Authentication via WebPortal. So about the certificate which will be used for the https://<dynamic-ip>/connect URL. If I can recreate this internal Certificate with a individual defined common name attributes (IP - Address as common name) then that would be fine.

Re: Checkpoint 1400 - Change Browser Based Auth Portal Certificate when using SmartProvisioning

G_W_Albrecht — Fri, 18 Dec 2020 14:23:25 GMT

The way to change this is in the GW IA settings: