MFA on Remote access VPN

[kachanner]

I currently have Harmony Endpoint in my environment, and I want to switch all the users' authentication methods to using an additional factor to log in.

There is currently an integration with the Identity Provider Microsoft Azure, and the MFA over VPN works as an authentication when set up manually on a user's computer (I have it enabled and working). The issue now is to get it pushed to everyone. I tested editing the .trac file, but that works with new installations only from my tests, so I would have to uninstall everyone's EDR, then reinstall it. 

Additionally installing the ".trac" package on an endpoint with EDR already installed doesn't change the site settings/authentication method so it remains with the same settings it previously had.

I am seeking some guidance to see if this can be achieved whether through the Infinity portal, Smartconsole, or any other way that might exist.

[PhoneBoy]

There are a couple options:

1. Delete and re-add the VPN site
2. Replace the trac.config file on the Endpoint: https://support.checkpoint.com/results/sk/sk183469 

Neither option requires a reinstall.