VPN login using AD

[kennethchow]

Hi everyone, 

I am first time to use the checkpoint firewall, the model is FW5200 the firmware is running R80.4.  I would like to use the windows AD login to replace the personal certificate.  Is that support or I need to configure the RADIUS server in exisitng environment?

Many thanks.

[PhoneBoy]

Needs to be done with RADIUS.
Depending on the JHF level you’re on, if you’re using AzureAD, you can also leverage SAML as well.

[kennethchow]

What is the JHF level?  And which client I can use to connect our VPN server, it is because I have tested SecuRemote or Endpoint Security VPN but cannnot success.

[PhoneBoy]

JHF = Jumbo Hotfix.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
The requirements for Remote Access SAML support (needed to integrate with AzureAD) is here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

More details about what exactly you've configured and the precise behavior you're seeing would help.
Screenshots are highly encouraged.