The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Kerberos is not supported as SSO method for registration to Exchange Server for Mobile Access Push Notifications
Technical Level
Solution ID
sk110629
Technical Level
Product
Mobile Access / SSL VPN
Version
R77.10 (EOL), R77.20, R77.30 (EOL)
OS
Gaia, SecurePlatform 2.6
Platform / Model
All
Date Created
21-Mar-2016
Last Modified
18-May-2017
Symptoms
Kerberos is not supported as SSO method for registration to Exchange Server for Mobile Access Push Notifications.
This may result in authentication failure in case the Exchange Server supports only Kerberos authentication (via "Negotiate"), or if Kerberos Constrained Delegation is used (which requires Kerberos support).
Cause
Currently, Push Notifications do not support Kerberos authentication.
When choosing Kerberos, and specifically Kerberos Constrained Delegation, Push Notifications will not work.
