I was stumped since this started happening out of now where and I was trying to pinpoint what happened and what was causing it. To try to fix it we had to reassign Desktop in one of our pools to see if it connects.

It would also display a black screen for 15 seconds before receiving the error message. The users kept getting 'The Connection to the Remote Computer has timed out' after trying to connect to their desktop. Since our Call Center used Dual Monitors we could not use RDP since it wouldn't use MultiMonitor. We invite you to learn more about our technology and architecture and to download and test the Enterprise version.I wanted to post this since this issue may occur with some users using CheckPoint VPN.įor over a month randomly some computers were unable to connect to VMware View Desktop with PCOIP, only RDP worked for them. The WiKID Strong Authentication System is a very reasonably priced two-factor authentication solution. Now you should have properly configured two-factor authentication for your CheckPoint VPN. This will open up the firewall port to the new network client.

From a terminal window, stop and start the WiKID Strong Authentication Server.

Leave the Return Attributes empty (unless you know what you're doing)

On the next page, enter the Shared Secret created above.

Choose a WiKID domain to the network client.

Create a name such as 'Checkpoint Firewall/VPN'.

Next we add a specific network client for the Checkpoint firewall/vpn:

You should be able to leave the settings as is and click 'Initialize'.

Click on the 'Configuration' tab in the WiKIDAdmin web interface.

On the WiKID Server, be sure to enable Radius:

Give this server a priority if multiple Radius servers are configured.

Select 'Radius version 1.0 Compatible'.

If need be, you can change to port 1645 on WiKID but it is not recommended. 'New Radius should use port 1812, which is the default for WiKID.

In the 'Service' field select 'New Radius'.

In the 'Host' field enter the host name that was configured above.

In the 'Comment' field enter comments of your choice, such as 'WiKID Radius interface'.

In the 'Name' field assign a name for the Radius server.

A Radius Server Properties window should be displayed.

Click on 'New', from the menu select Radius.

For clarity, enter 'WiKID two-factor authentication' or some such for a comment.Ĭonfigure the WiKID Strong Authentication Radius interface in the Check Point Policy Editor.

In the Workstation Properties window, enter the workstation name, IP Address, choose 'Host' for Type.

Click on 'Manage' then 'Network Objects'.

Start by adding the workstation object for a Radius server in the Check Point Policy Editor: This document provides information on how to enable the Radius interface on FireWall-1 to accept one-time passwords from the WiKID Strong Authentication System. We assume that you have already installed Check Point VPN-1/FireWall-1.

Checkpoint remote vpn