Modify the PHP file, and change the URL values to the site location (search for TURing) If no RADIUS message is seen, check that the Swivel RADIUS server is started and that the correct ports are being used.Ĭustomising the Mobile Access Blade Login Page Modify custom LoginPage.php Check the Swivel logs for a RADIUS success or rejected message. At the SSL VPN login enter the required OTC. From the Swivel Administration console select User Administration and the required user then View Strings, and select an appropriate authentication string or OTC for the user. Browse to the SSL VPN login page, and enter Username and if being used, the password.

For redundancy select Primary and Secondary RADIUS servers, see VIP on PINsafe Appliances.Īt this stage it should be possible to authenticate by SMS, hardware Token, Mobile Phone Client and Taskbar to verify that the RADIUS authentication is working for users. Note: When a Swivel appliance VIP is used, the real IP address should be used and not the VIP. You can select RADIUS version 1 or 2, and PAP or MSChap as the protocol: Swivel will detect these protocols automatically.

Select Swivel as the host, “NEW-RADIUS” as the service, and enter the shared secret you previously set on the Swivel appliance.

You just need to give it a name and add the IP address.

Configure the Swivel server as a new host.

In the New RADIUS popup window click on 'New'.

Under Servers and OPSEC, locate the RADIUS folder and right click and select New RADIUS.

You need to configure Swivel as an authentication server on the Mobile Access Blade Mobile Access Blade Configuration Enabling RADIUS Authentication in Mobile Access Blade

Setting up Swivel Dual Channel Transports To allow the TURing image, PINpad and other single channel images, under Server/Single Channel set Allow session request by username to Yes. On the Swivel Administration console configure the RADIUS Server and NAS, see RADIUS Configuration Swivel Configuration Configuring the RADIUS server For redundancy select Primary and Secondary RADIUS servers, see VIP on PINsafe Appliances.

When a Swivel appliance VIP is used, the real IP address should be used and not the VIP. Use of the TURing, will require the use of a NAT. This document outlines the details required to carry this out.Ĭheck Point CR75 Mobile Access Blade and newer Swivel can provide strong and two factor authentication to the Check Point Mobile Access Blade.

8.2 Connect to the Check Point Appliance.

8 Customising the Mobile Access Blade Login Page.

7.2 Configuring AD Templates to use RADIUS.

7.1 Enabling RADIUS Authentication in Mobile Access Blade.

6.3 Setting up Swivel Dual Channel Transports.

6.2 Enabling Session creation with username.

Checkpoint ssl vpn portal