topic Re: SMB - disable default username and password authentication in Spark Firewall (SMB) https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18231#M604 <HTML><HEAD></HEAD><BODY><P>These are the methods to configure remote access users on locally managed SMBs:<BR />• Local users<BR />• RADIUS users<BR />• AD users</P><P>Certificates are accepted (if known).</P></BODY></HTML> Wed, 25 Apr 2018 11:51:24 GMT G_W_Albrecht 2018-04-25T11:51:24Z SMB - disable default username and password authentication https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18227#M600 <HTML><HEAD></HEAD><BODY><P>Hello Checkmates,</P><P></P><P>I found very useful information here about the SMB appliances and how to start Remote-Access VPN with certificate authentication. I'm curious to know is there a why to disable the default username and password authentication?</P></BODY></HTML> Wed, 25 Apr 2018 09:17:55 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18227#M600 Georgi_Lyaskov 2018-04-25T09:17:55Z Re: SMB - disable default username and password authentication https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18228#M601 <HTML><HEAD></HEAD><BODY><P>Just to clarify - Now remote users can connect with SecuRemote VPN or Capsule VPN client with either Username and Password authentication or certificates. I want to force the clients to use only certificates and disable the username- password authentication for VPN at all.</P></BODY></HTML> Wed, 25 Apr 2018 10:37:19 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18228#M601 Georgi_Lyaskov 2018-04-25T10:37:19Z Re: SMB - disable default username and password authentication https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18229#M602 <HTML><HEAD></HEAD><BODY><P>The answer is easy: CP password has a length between 4 and 8 characters and may contain no spaces <IMG src="https://community.checkpoint.com/legacyfs/online/checkpoint/emoticons/wink.png" />. In times of 2FA this is rather a weak solution...</P></BODY></HTML> Wed, 25 Apr 2018 10:56:54 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18229#M602 G_W_Albrecht 2018-04-25T10:56:54Z Re: SMB - disable default username and password authentication https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18230#M603 <HTML><HEAD></HEAD><BODY><P>Yes, 2FA will be the best, but as I see it is not natively supported on SMB appliances and is possible only with 3rd party products, or I'm missing such solution from Checkpoint?</P></BODY></HTML> Wed, 25 Apr 2018 11:07:44 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18230#M603 Georgi_Lyaskov 2018-04-25T11:07:44Z Re: SMB - disable default username and password authentication https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18231#M604 <HTML><HEAD></HEAD><BODY><P>These are the methods to configure remote access users on locally managed SMBs:<BR />• Local users<BR />• RADIUS users<BR />• AD users</P><P>Certificates are accepted (if known).</P></BODY></HTML> Wed, 25 Apr 2018 11:51:24 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18231#M604 G_W_Albrecht 2018-04-25T11:51:24Z Re: SMB - disable default username and password authentication https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18232#M605 <HTML><HEAD></HEAD><BODY><P>You are correct. On SMB appliances it is only possible with 3rd party products. You can use a Radius server which takes care of the 2FA for you.</P></BODY></HTML> Fri, 04 May 2018 16:55:06 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-disable-default-username-and-password-authentication/m-p/18232#M605 Pedro_Espindola 2018-05-04T16:55:06Z