topic Re: Is there any KB / Video can teach me how to setup SSLVPN for a central manged SMB? in Spark Firewall (SMB)

Is there any KB / Video can teach me how to setup SSLVPN for a central manged SMB?

BlueGrass — Fri, 19 Aug 2022 14:17:01 GMT

Hi all,

We are using Cloud SMS to manage an SBM 1570 device.

I am trying to set up SSLVPN on 1570 with only local accounts + [User name and password] authentication.

We also need Application and URL filtering for this SSLVPN user, so legacy user setup is not allowed.

IT seems lots of old Video / KB are no use for this case.

Can anyone help, please?

Thanks.

Re: Is there any KB / Video can teach me how to setup SSLVPN for a central manged SMB?

Chris_Atkinson — Sat, 20 Aug 2022 15:40:15 GMT

Whilst your requirements aren't super clear please note there are currently some Identity Awareness limitations for Spark devices managed by Smart-1 Cloud.

Please refer:

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Check-Point-SmartCloud-Admin-Guide/Topics-Smart-1-Cloud/Advanced-Configuration.htm#How_to_Connect_a_Local_Active_Directory_to_Smart-1_Cloud

Re: Is there any KB / Video can teach me how to setup SSLVPN for a central manged SMB?

PhoneBoy — Sat, 20 Aug 2022 17:48:38 GMT

When you say SSLVPN what precisely are you expecting?
If you’re expecting Mobile Access Blade functionality (ie with a web browser), the SMB appliances do not support it, centrally managed or otherwise.

If you expect to use the SNX client for this user, you’ll probably need to install that client separately.
Otherwise, use Check Point Mobile.

The more details you can provide about what exactly you’re trying to achieve, the more likely we’ll be able to help.

Re: Is there any KB / Video can teach me how to setup SSLVPN for a central manged SMB?

BlueGrass — Mon, 22 Aug 2022 12:33:05 GMT

There are what blades installed on the Checkpoint 1570.

I want to use the CheckPoint 1570 local user account for SSLVPN. So I check this box, not sure if this is right set.

Also move to VPN client and allow Basic SecureRemote.

For the VPN authentication, I select username and password.

Allow office mode to all users.

Create a local user and assign it to my AccessRole

Install the agent on the remote PC, select Secure remote.

Connected to the site, but seems the 1570 can not recognize the user.

Re: Is there any KB / Video can teach me how to setup SSLVPN for a central manged SMB?

PhoneBoy — Tue, 23 Aug 2022 20:01:01 GMT

SecuRemote does not support Office Mode, which probably means Identity Awareness won't work properly.
Reinstall as Check Point Mobile and try again.
Note the 1570 has a license that will support this for a certain number of users, don't recall how many offhand.

Re: Is there any KB / Video can teach me how to setup SSLVPN for a central manged SMB?

BlueGrass — Wed, 24 Aug 2022 13:31:40 GMT

Reinstall as Check Point Mobile and try again <<< You are the right man giving the right answer.