SAML Authentication on SMBs for RA-VPN

[Soroosh]

Dear Mates,
 I recently tried to configure an SMB (1535) with R81.10.17 to use EntraID for RA-VPN authentication, but the login page on the gateway does not respond.
The Remote Access VPN Remote Access port is 981.
2. The GUI web port is 2007.
The rest of the configuration for Identity Provider is visible in the screenshots.
What could be causing the gateway to not respond to the login page?

Thanks in advance & Best Regards

Soroosh

[Chris_Atkinson · Accepted solution]

Below suggests it's not supported to change the default port.

SMBGWY-12300 In Azure AD, authentication with SAML fails when you change the default port for Remote Access VPN.  

Workaround: Use the default port 443. 

[Soroosh]

Hi,
 Do you mean the Remote Access Port or Web GUI Port?

[Chris_Atkinson]

Remote Access port, refer also:

https://community.checkpoint.com/t5/Remote-Access-VPN/central-managed-SMB-Appliance-1900-and-Azure-E...

https://community.checkpoint.com/t5/SMB-Gateways-Spark/Spark-Entra-ID-SAML-authentication-for-RA-VPN...

[Soroosh]

Thanks.

I changed the RA-VPN port back to its default value of 443, and now it works perfectly.

Regards