That will cache the RADIUS information and on our Virtual Appliance, open the firewall port. Now on the WiKID server terminal, restart WiKID using 'wikidctl restart'. On the next page, enter the Shared Secret you entered on the Checkpoint Secure Gateway for the RADIUS host. Give it a name and enter the IP address of the Checkpoint Gaia Security Gateway (or the NPS or Freeradius server if you are using them). On the WiKIDAdmin UI, click on the Network Client tab then Create a New Network Client. Next we can quickly add the Checkpoint to the WiKID server. Select the RADIUS and the WiKID server setup previously.Ĭlick OK. Now to configure the Checkpoint SSL-VPN, bring up the Authentication page under Mobile Access. Move the generic* from Available Members to Selected Members. Right click on the Policy and select Edit. Next, click on the Mobile Access tab and the Policy page. On General Properties tab, add a descriptive comment.Ĭlick on the Authentication page and choose Radius as the Authentication Scheme and Select the WiKID o r NPS/Freeradius host you created earlier. On the main menu, select Manage > Users and Administrators > New > External User Profile > Match all users. Now, we need to create an External User profile.

Be sure to select New-RADIUS as the protocol. On the General tab, give the server a name such as WiKID. Head back to the main management button and select Manage > Servers and OPSEC Applications > New > RADIUS. Click OK to save the new host, and then click the Close button in the Network Objects window. Click on the main management button and select Manage > Network Objects > New > Node > Host.Įnter the name and IP address of your WiKID Strong Authentication server on the General Properties page. To configure your Checkpoint, log in to the SmartDashboard. Don't have a WiKID server for two-factor authentication? Get one! First five users are free.Ĭonfigure the Checkpoint Security Gateway Note that if you want to integrate your directory in this process simply use the IP address of your RADIUS server - NPS or Freeradius for example - instead of your WiKID server. The first part shows how to add a RADIUS host to the Checkpoint using the SmartConsole. This tutorial shows how to add two-factor authentication to the Checkpoint Security Gateway's SSL-VPN solution Mobile Access.

Vpn checkpoint mobile