CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.

Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E


Results 1 to 2 of 2

Thread: RADIUS for external users and mfa

  1. #1
    Join Date
    Rep Power

    Default RADIUS for external users and mfa

    I'm trying to authenticate external users with RADIUS and multi-factor authentication via Azure. I have defined radius server, authentication modes etc., but according to logs the firewall doesn't talk to RADIUS server. Logs say that external user's identity is recognized via domain matching belonging to correct group containing external user profile (which points to correct radius server), but still the log also says "User unknown to Firewall-1 authentication". Any ideas what is wrong?

    We use Mobile Access for this, configured currently with username & password authentication. Does anyone know, if the client supports also MFA secondary input, like passcode sent to user phone? And should I use some other authentication method instead of user/pwd?

  2. #2
    Join Date
    Rep Power

    Default Re: RADIUS for external users and mfa

    Do a packet capture and see if the raduis server is returning unknown user.

Similar Threads

  1. Radius Authentications for new users not working
    By udupik in forum Authentication
    Replies: 6
    Last Post: 2014-12-03, 12:24
  2. Certificates/smartcard and RADIUS VPN users
    By jstuartza in forum Authentication
    Replies: 1
    Last Post: 2013-08-21, 10:45
  3. CP-EDGE-NW-8-users RADIUS source address
    By Serji in forum Check Point UTM-1 Edge Appliances
    Replies: 0
    Last Post: 2012-08-27, 04:26
  4. User authentication with external radius
    By bandit in forum Authentication
    Replies: 5
    Last Post: 2010-04-22, 17:57
  5. how to Change radius server for multiple users
    By danzaka in forum SecureClient/SecuRemote
    Replies: 1
    Last Post: 2007-05-24, 16:53

Tags for this Thread


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts