Machine certificate authentication and VSX

[Teddy_Brewski]

Hello,

Not sure if I hit the bug or I'm doing something wrong -- any advise would be greatly appreciated.

VSX R80.40 Take 154 with two VSs -- both offer VPN connectivity for EndPoint clients (using internal Check Point username/password).

I started working on machine certificate authentication on the second VS, and after setting Machine Certificate Authentication to Mandatory (under gateway > VPN Clients > Authentication) clients connecting to the first VS (without Machine Certificate Authentication selected at all) got affected too.  The tunnel can be established, but no traffic passing through.

After changing it to When Available, the issue is back to normal.

Thank you.

[_Val_]

Hey, you tagged the post as Site to Site VPN, but it is in fact for Remote Access VPN, correct?

[PhoneBoy · Accepted solution]

As far as I know, this should be supported on VSX.
Recommend a TAC case: https://help.checkpoint.com