Cache 2FA OTP challenge

[jgarcias]

Hello,

We've successfully deployed a 2FA for remote access users like in this post: https://community.checkpoint.com/t5/General-Topics/MFA-with-Google-Authenticator/m-p/39456#M8416

We are using google authenticator compatible tokens for all users but every time they try to login into the VPN they are asked for the challenge (OTP PIN). Is there any way to configure the CheckPoint gateway to remember a previous successful authentication for 4 hours for example?

Thanks.

[PhoneBoy]

Even if the client cached the OTP, it’s be different by the time it’s needed again.
Possible if you integrate with SAML instead of RADIUS you can achieve what you’re after.