Use MFA with Microsoft Authenticator

[tecnico]

Hi,

I would like about how configure MFA using Microsoft Authenticator App in Smart Console.

I suppose that is similar than configure a SecurID.

Thanks

[MvdS]

Hi technico,

Check out SAML.  https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_IdentityAwareness_AdminGuide/Topic...

Works great here. You can add extra checks like is machine azure ad-joined etc.

[PhoneBoy]

SAML Authentication for SmartConsole itself requires R81.20 and above.
See: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuid...

[tecnico]

I want to configure this for Endpoint VPN loggin. It´s possible? How?

Thanks for all.

[the_rock]

I believe below document is what you are after.

Andy

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[tecnico]

Hi,

I have already applied these configuration but I have an error.

The picture shows the error.

PD: The management is a cloud SMS (Quantum Smart-1 Cloud)

Thanks for all.

Best regards.

[PhoneBoy]

You need to change the platform portal URL on the relevant gateway object.
The 100.100 IP address is used only for Smart-1 Cloud.

[tecnico]

Hi,

primary, thanks for all.

Change the 100.100 IP for my public IP is valid?

[tecnico]

I have already change the IP and there is a new error.

The picture shows the error.

[PhoneBoy]

The 100.100 IP addresses are used only by Smart-1 Cloud to communicate with your gateway.
They cannot be used in other contexts, including for the SAML configuration.
You will need to adjust these URLs in the SAML configuration as well.

[tecnico]

Ok.

Thanks for all.