Configuring VPN
Quantum Spark 1500, 1600, and 1800 Appliances R81.10.X Locally Managed Administration Guide|229
n
A new user is configured.
n
The information for an existing user is edited, such as a new email
address is added or the user receives Remote Access permissions.
n
The admin decides that all users must use Cloud Authentication.
iv. On the Advanced tab, below Dynamic ID Settings, enter the:
n
Length of the one-time password.
n
Amount of time in minutes until the password expires.
n
Maximum number of retries.
v. Below Country Code, enter the Default country code.
vi. Click Apply.
To sign in with Two-Factor Authentication:
i. Connect to your VPN.
ii. You get a prompt for a DynamicID One Time Password (OTP) sent to your mobile
phone as an SMS, or directly to your email account, or by scanning the QR code.
Notes:
n
VPN Two-Factor Authentication is per gateway, not administrator.
n
When you turn on Two-Factor Authentication, you enable it for all VPN
clients. This means all VPN users must have a configured mobile phone
number and email address with which to connect.
f. In the section "VPN Remote Access users can connect via", select the applicable Remote
Access VPN clients:
n
Check Point VPN clients - Install a VPNclient on your desktop or laptop.
n
Mobile client - To connect on your smartphone or tablet (iOS or Android).
n
SSL VPN - To connect through SSL VPN. Enter the IP address in your web browser.
n
Windows VPN client - L2TP. For either Windows or Mac, connect with a pre-shared
key. For instructions, click How to connect.
To configure VPN remote access methods:
i. Select the checkbox next to the desired method and click How to connect....
The Usage window opens.
ii. Follow the instructions on the screen.
iii. Close the window.
iv. Click Apply.
g. At the bottom of the page, click Apply.
Note - When the Remote AccessVPN blade is managed by Cloud Services, a lock icon
appears. You cannot toggle between the On and Off states. If you change other policy
settings, the change is temporary. Any changes you made locally are overridden in the
next synchronization between the gateway and Cloud Services.
To Next Page
