CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


CPUG Challenge 2018?? We will be holding another CPUG Challenge for 2018.
The plan is to time it around CPX again (earlier this year), but not necessarily limit it to those in attendance.
I'll provide more details as we get a bit closer, but be ready! -E

 

Results 1 to 2 of 2

Thread: RADIUS for external users and mfa

  1. #1
    Join Date
    2010-08-19
    Location
    Finland
    Posts
    27
    Rep Power
    0

    Default RADIUS for external users and mfa

    I'm trying to authenticate external users with RADIUS and multi-factor authentication via Azure. I have defined radius server, authentication modes etc., but according to logs the firewall doesn't talk to RADIUS server. Logs say that external user's identity is recognized via domain matching belonging to correct group containing external user profile (which points to correct radius server), but still the log also says "User unknown to Firewall-1 authentication". Any ideas what is wrong?

    We use Mobile Access for this, configured currently with username & password authentication. Does anyone know, if the client supports also MFA secondary input, like passcode sent to user phone? And should I use some other authentication method instead of user/pwd?

  2. #2
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,480
    Rep Power
    8

    Default Re: RADIUS for external users and mfa

    Do a packet capture and see if the raduis server is returning unknown user.

Similar Threads

  1. Radius Authentications for new users not working
    By udupik in forum Authentication
    Replies: 6
    Last Post: 2014-12-03, 12:24
  2. Certificates/smartcard and RADIUS VPN users
    By jstuartza in forum Authentication
    Replies: 1
    Last Post: 2013-08-21, 10:45
  3. CP-EDGE-NW-8-users RADIUS source address
    By Serji in forum Check Point UTM-1 Edge Appliances
    Replies: 0
    Last Post: 2012-08-27, 04:26
  4. User authentication with external radius
    By bandit in forum Authentication
    Replies: 5
    Last Post: 2010-04-22, 17:57
  5. how to Change radius server for multiple users
    By danzaka in forum SecureClient/SecuRemote
    Replies: 1
    Last Post: 2007-05-24, 16:53

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •