Setting up secondary Remote Access VPN authentication method using radius

[jnoble]

Hi all,

We have SAML authentication in place for remote access vpn login for our users. When Microsoft had an issue a few weeks back, some users were affected and we want to set up a backup authentication method using radius incase Microsoft is having issues again in future! 

I was working with TAC but we are not getting anywhere.

We have a 2022 Windows server which is our Active directory and the radius service is running on it. The gateway is R81.10 and we followed the admin guide to setup the radius authentication, but the authentication is getting rejected by NPS policy. The account gets locked out after 3 attempts because of our password policies. It means that the vpn client is sending the username and password to radius but the password might not be in correct format. Does anyone experienced an issue like this? 

Anybody have proper steps for setting up radius authentication for R81.10?

Thanks,

JN

[_Val_]

NPS policy means the issue is on Microsoft side. Did you reach out to MS support too?

[PhoneBoy]

If the RADIUS Server has been patched against BLAST RADIUS, then you will need equivalent patches on the Check Point side, which have not been rolled out to current JHF yet.
Please consult with TAC: https://help.checkpoint.con