Checkpoint Remote Access VPN MFA

[gemechis]

We are using checkpoint remote access vpn for our remote users. Now we need to integrate all our remote VPN users if there is any open source MFA or any possible scenarios for making everything authenticated using MFA on the checkpoing gateway R81.10 and above.

[PhoneBoy]

DynamicID can be used without extra software, but it does require configuring email addresses for each user.
See also: https://community.checkpoint.com/t5/General-Topics/MFA-with-Google-Authenticator/td-p/39456 

[gemechis]

@PhoneBoy Thanks for the fast response. 

I have checked the dynamic ID and it worked well on Checkpoint Mobile Web Portal. But I wanted to use the MFA for Checkpoint Endpoint Security. So, how can I achieve that?

[PhoneBoy · Accepted solution]

It’s supported for Remote Access clients also, you just have to configure it as an additional authentication method.
See: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_RemoteAccessVPN_AdminGuide/C...

[gemechis]

@PhoneBoy 

Based on the link you have shared I have configured the dynamic id and it started working. Thanks