MFA for endpoint security VPN client

[max71]

hello guys , i have a customer that request a MFA for vpn client, i can choose the right solution based on more cheaper functionality es (mail, SMS, OTP ....).

Can someone suggest me a good cheaper solution ? and how to implement it ?

Thank you

Max

[PhoneBoy · Accepted solution]

MFA support can be integrated via RADIUS.
If you're looking for a free solution, you can use FreeRADIUS and MultiOTP.
See: https://wiki.freeradius.org/guide/multiOTP-HOWTO

[max71]

Hello PhoneBoy i have a checkpoint gaia 81.10 and vpn client secure remote, and i wish to have MFA but is enought for me email notify link with password(OTP).

I have read a doc Remote Access VPN R81.20 Administration Guide (checkpoint.com) page 41 that describe a MFA for checkpoint. My question is for you is possible to me have this configuration, i have enable as reported by doc the  Dynamic ID Settings e clear Use global setting, but the VPN client goes up connection without ask me something.

I have seen into Multiple Authentication Schemes for Mobile Access / Remote Access (checkpoint.com) and seems to be supportd in my version , have you some tips for me ? thank you.

[PhoneBoy]

As far as I know, this is supported.
We'd need more details on what precisely you've configured (screenshots, etc. with sensitive details redacted) as well as the client versions involved.