Radius Authentication through checkpoint

am 22.11.2006 21:55:24 von Slimard

Hi,

Would it be possible to set up IAS (Windows 2003) and Checkpoint so
that the vpn users need to provide username/password as well as
certificate to be able to authenticate?

My vpn users can authenticate with Radius. I just want to add
additional layer of security (certificates). Before putting effort on
deploying PKI, I would like to know if someone has this working.

Thanks
Slimo

Re: Radius Authentication through checkpoint

am 25.11.2006 21:23:54 von John Smith

On Wed, 22 Nov 2006 12:55:24 -0800, slimard@gmail.com wrote:

> Hi,
>
> Would it be possible to set up IAS (Windows 2003) and Checkpoint so
> that the vpn users need to provide username/password as well as
> certificate to be able to authenticate?
>
> My vpn users can authenticate with Radius. I just want to add
> additional layer of security (certificates). Before putting effort on
> deploying PKI, I would like to know if someone has this working.
>
> Thanks
> Slimo

I am not familiar enough w/ checkpoint, but i know on cisco vpn
concentrators you can use certificate authentication with IAS in the
backend for RADIUS
(:

Re: Radius Authentication through checkpoint

am 26.11.2006 04:04:51 von flanny

What version of CP? I believe as far back as version 4.3 you could use
radius but I could be wrong. right now CP is NGX R6.2

In short you should be able to do this.

Greg

slimard@gmail.com wrote:
> Hi,
>
> Would it be possible to set up IAS (Windows 2003) and Checkpoint so
> that the vpn users need to provide username/password as well as
> certificate to be able to authenticate?
>
> My vpn users can authenticate with Radius. I just want to add
> additional layer of security (certificates). Before putting effort on
> deploying PKI, I would like to know if someone has this working.
>
> Thanks
> Slimo

Re: Radius Authentication through checkpoint

am 26.11.2006 04:05:06 von flanny

Re: Radius Authentication through checkpoint

am 27.11.2006 11:54:45 von Slimard

Hello,

We are using R60.
Do you have this kind of set up running on your company?

Thanks

Slimo

flanny a =E9crit :

> What version of CP? I believe as far back as version 4.3 you could use
> radius but I could be wrong. right now CP is NGX R6.2
>
> In short you should be able to do this.
>
> Greg
>
> slimard@gmail.com wrote:
> > Hi,
> >
> > Would it be possible to set up IAS (Windows 2003) and Checkpoint so
> > that the vpn users need to provide username/password as well as
> > certificate to be able to authenticate?
> >
> > My vpn users can authenticate with Radius. I just want to add
> > additional layer of security (certificates). Before putting effort on
> > deploying PKI, I would like to know if someone has this working.
> >=20
> > Thanks
> > Slimo