Capsule VPN and Multiple Authentication Methods errors

[Andy_Battle]

Gateway Version - R81.10
Management Version - R81.10

Using Capsule Client VPN on Windows 10  

Was using LDAP Authentication via Legacy Authentication (Defined on user record)
Have just enabled RADIUS based VPN with Microsoft Azure MFA using Multiple Authentication Client Settings.

Any client that has a newly defined profile is working fine

Any client where we delete and re-create profile is fine.

Any client that was previously deployed is erroring immediately 

"Cannot connect to VPN XXX"

"Arg_NullReferenceException"

Running latest capsule version (v1.1.18) and have reviewed  https://support.checkpoint.com/results/sk/sk177368

Any

[PhoneBoy]

Recommend a TAC case: https://help.checkpoint.com

[the_rock]

I think there is an easy fox for this. Can you double click in radius auth entry and send screenshots of how its configured? I know there is sessing there that affects this behavior, seen ot before. Please blur out any sensitive data.

Andy

[Andy_Battle]

Here is the Radius Properties

[the_rock]

I was more interested in seeing whats under user directories, I think thats the key here.

[Andy_Battle]

no worries

[the_rock]

Thats your problem, that setting. Make sure manual is selected and proper ldap unit and internal users, if there are any.

Andy

[Chris_Atkinson]

Hey @Andy_Battle 

Did you manage to resolve the issue or is it ongoing?

[the_rock]

Thanks for following up @Chris_Atkinson . I assumed no news is good news (as they say), but better to confirm :). @Andy_Battle , let us know the outcome mate.

Cheers,

Andy 

[michele]

Hi, I would also like to implement this solution as I would not like to go and install checkpoint client but use capsules (but increasing the security level=not just user and password).
Were you able to solve the problem?
Can you give me a tip on how to do it?

[PhoneBoy]

Only one authentication factor is supported in the Capsule VPN clients.
Support for additional factors is currently not planned and would need to be addressed as part of an RFE with your local Check Point office.

[michele]

Okay, but as a single factor can I use an alternative to username and password? Certificate?

[PhoneBoy]

Yes, you can use a certificate.
That said, you may need to adjust your configuration to support this: https://support.checkpoint.com/results/sk/sk113401 

[michele]

Do I have to use the checkpoint ca? Can I use mine on the cloud (scepman)?

[PhoneBoy]

As far as I know you can.