You'll need to pre-enroll your users in Duo using one of our available methods before they can log in using this configuration. First Stepsīefore moving on to the deployment steps, it's a good idea to familiarize yourself with Duo administration concepts and features like options for applications, and Duo policy settings and how to apply them. See Duo Knowledge Base article 7546 for additional guidance. If your organization requires IP-based rules, please review Duo Knowledge Base article 1337.Įffective June 30, 2023, Duo will no longer accept TLS 1.0 or 1.1 connections or support insecure TLS/SSL cipher suites. This application communicates with Duo's service on SSL TCP port 443.įirewall configurations that restrict outbound access to Duo's service with rules using destination IP addresses or IP address ranges aren't recommended, since these may change over time to maintain our service's high availability. See the Check Point Support Center for a list of Remote Access solutions that support SSL. This configuration has been tested from a web browser SSL VPN session (with and without SSL Network Extender), the Check Point Mobile Enterprise app, the Check Point Mobile VPN app, and the preinstalled Check Point VPN client in Windows 8.1. Read the enrollment documentation to learn more. You'll need to create your users in Duo ahead of time using one of our other enrollment methods, like directory sync or CSV import. This configuration doesn't support inline self-service enrollment. Once configured, Duo sends your users an automatic authentication request via Duo Push notification to a mobile device or phone call after successful primary login. If you are already running a Duo Authentication Proxy server in your environment, you can generally use that existing host for additional applications, appending the new configuration sections to the current config. This Duo proxy server also acts as a RADIUS server - there's usually no need to deploy a separate additional RADIUS server to use Duo. To integrate Duo with your Check Point Mobile Access VPN, you will need to install a local proxy service on a machine within your network.

Please refer to Duo Knowledge Base article 6328 for more information and suggested workarounds.

This issue was resolved in version 5.0.2. There is a known issue Duo Authentication Proxy versions 5.0.0 and 5.0.1 and Check Point RADIUS Authentication.

Checkpoint ssl vpn client