SSLVPN with Google Auth and ADselfservice as MFA

[Jonathan]

Hi,

We use two methods for remote access VPN connections (R81.10):

1. Checkpoint Mobile Client for VPN connections using certificates.
2. Checkpoint SSLVPN, with login method of AD user + DynamicID.

For the SSLVPN, we want to ADD ANOTHER login method of AD user + Google Auth, and we want to utilise ADSelfservice solution for this, which uses Windows NPS as a RADIUS server:
https://www.manageengine.com/products/self-service-password/multi-factor-authentication-for-secured-...

I've read several Checkpoint guides of how to set up RADIUS server, which involves, among other things, changing attributes in GUIdbedit and assigning the RADIUS server to the gateway.
I'm affraid these changes will affect the currently active login methods (Checkpoint Mobile and SSLVPN).

Can anyone shed some light about this process?
Also, does anyone has any experience with the ADSelfservice solution?

Thanks

[G_W_Albrecht]

Why not contact CP TAC to get help here?

[Jonathan]

I usually get a lot of help and good advises from this community, so I thought of trying here first 😁

[G_W_Albrecht]

I would rather do both 😎

[PhoneBoy]

Am not familiar with ADselfservice.
Do they provide a specific integration guide for Check Point that we can review?

I assume as long as both solutions don't require conflicting RADIUS attributes to be defined, it should work.