Restricting acces to vpn with certificate

[Ismael]

Hello, I would like to restrict the authentication, only to a certain group of users defined in our active directory, to the vpn only with a certificate. And allow other users to continue to use username and password to access the vpn. It's possible? In my case we have version R80.30.

I know that I can restrict access to the vpn to two different groups in the "remote access" VPN community, but then I don't know how to make one of those groups access only via certificate

Thanks in Advance

[PhoneBoy]

You have to configure multiple authentication schemes as described here: https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RemoteAccessVPN_AdminGuide/T...

I don't believe you can prevent users from choosing "the wrong option" in this case.
Might be worth a TAC case just to confirm that, though.