Click on RADIUS and select the WIKID server you added as RADIUS server above. Click on VPN Clients and then Authentication. Right click on your Gateway and select Edit. Click on the IPSec VPN tab and click on Gateways in the left window. Now to configure the Checkpoint IPSec -VPN. Move the generic* from Available Members to Selected Members. Right click on the Policy and select Edit. Next, click on the Mobile Access tab and the Policy page. On General Properties tab, add a descriptive comment.Ĭlick on the Authentication page and choose Radius as the Authentication Scheme and Select the WiKID o r NPS/Freeradius host you created earlier. On the main menu, select Manage > Users and Administrators > New > External User Profile > Match all users.

Now, we need to create an External User profile. Be sure to select New-RADIUS as the protocol. On the General tab, give the server a name such as WiKID. Head back to the main management button and select Manage > Servers and OPSEC Applications > New > RADIUS. Click OK to save the new host, and then click the Close button in the Network Objects window. Click on the main management button and select Manage > Network Objects > New > Node > Host.Įnter the name and IP address of your WiKID Strong Authentication server on the General Properties page. To configure your Checkpoint, log in to the SmartDashboard. Don't have a WiKID server for two-factor authentication? Get one! First five users are free.Ĭonfigure the Checkpoint Security Gateway Note that if you want to integrate your directory for authorization in this process simply use the IP address of your RADIUS server - NPS or Freeradius for example - instead of your WiKID server.

The first part shows how to add a RADIUS host to the Checkpoint using the SmartConsole (which is exactly the same as for Mobile Access but repeated here for ease). This tutorial shows how to add two-factor authentication to the Checkpoint Security Gateway's IP-Sec VPN.

Check point mobile vpn