Integration Microsoft Entra(from Cisco) with Checkpoint

[Saranya_0305]

Dear Mates,

We have Management Server running on the R81.20 version and Security Gateways with the R81.10 version.

Currently we are using CiscoDuo for MFA and now we want to move to Microsoft Entra  for Remote Access VPN  Users.

We are now currently using Identity Awareness Blade from local AD for all users.

As per the below document and video we have configured on Azure side and created Azure AD and Identity Provider objects in Smartconsole.

Using Azure AD for Authorization

Azure AD Video

Can you please suggest me for how to proceed for Remote Access VPN process? 

If we do the integration what will be the impact on the local users like pro and cons?

Below is the current configuration screenshots in firewall.

Regads,

Saranya

[G_W_Albrecht]

@PhoneBoy can you move this to Remote Access VPN ?

[PhoneBoy · Accepted solution]

I'd start with this SK, which lists the various requirements for using this feature: https://support.checkpoint.com/results/sk/sk172909 
You can permit both authentication methods to be used.

[the_rock]

The sk @PhoneBoy provided is exactly what you need to follow.

Andy