To integrate 2FA, you can enable RADIUS authentication in Check Point VPN and configure policies in miniOrange to enable or disable 2FA for users. You can opt for any of the 2FA methods to secure your Check Point VPN. MiniOrange supports multiple 2FA/MFA authentication methods for Check Point VPN secure access such as, Push Notification, Soft Token, Microsoft / Google Authenticator etc. What are different 2FA/MFA methods for Check Point VPN supported by miniOrange? On successful 2nd factor authentication the user is granted access to login.User response is checked at miniOrange’s RADIUS Server side.Here user submits the response/code which he receives on his hardware/phone.

Now miniOrange RADIUS Server asks for a 2-factor authentication challenge to the user.Once the user's first level of authentication gets validated AD sends the confirmation to RADIUS Server.miniOrange RADIUS server passes user credentials to validate against the credentials stored in AD (Active Directory) / Database.User request acts as an authentication request to RADIUS Server(miniOrange).Primary authentication initiates with the user submitting his Username and Password for Check Point VPN.After the first level of authentication, miniOrange prompts the user with 2-factor authentication and either grants/revokes access based on the input by the user.

MiniOrange accomplishes this by acting as a RADIUS server that accepts the username/password of the user entered as a RADIUS request and validates the user against the user store as Active Directory (AD). MiniOrange 2FA authentication for Check Point VPN Login

VPN Clients that do not support RADIUS Challenge.

VPN Clients that support RADIUS Challenge.

Depending on the VPN client, 2-factor authentication can take two forms.

Checkpoint vpn 2fa