Two factor authentication for mobile/remote access users

[Thabo]

Good Day

I have IPsecVPn and Mobile access blade enabled and my remote access users use secure remote to connect. I have recently applied the R81.10 Take 139 Security hardening for Remote Access VPN users thereafter my local users are encountering an error when connecting of get a user username authenticated by Firewall-1 authentication warning.

Upon checking the logs from source address i identified under mobile access details a Failed login Factor: 1st factor - Password and reason - blocked internal user loging woth 1 -factor password authentication.

Checkpoint TAC has suggested i enable two factor authentication/MFA please is there any SK for configuring MFA.

regards

[PhoneBoy]

The configuration of MFA generally requires an external authentication server.
The only MFA we provide built-in is via DynamicID.
See: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_MobileAccess_AdminGuide/Cont...