> Source: [sk180396](https://support.checkpoint.com/results/sk/sk180396)

# sk180396 - How to configure Spark Firewall to send a One Time Password (OTP) for Remote Access VPN by SMS and by Email

| Property | Value |
|----------|-------|
| Solution ID | sk180396 |
| Date Created | 2022-12-12 |
| Last Modified | 2022-12-19 |
| Technical Level | General |
| Products | Spark Firewall (Locally Managed) |
| Versions | R81.10.X |
| Platform | 1570R, 1500, 1600, 1800 |

## Solution

### Background

By default, when you configure a Quantum Spark Appliance for Remote Access VPN with Two-Factor Authentication, the appliance sends a One Time Password (OTP) by SMS.

If there is an outage in a Cellular carrier, this SMS does not arrive.

### Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get an improved firmware for Quantum Spark Appliances.

You can configure a Quantum Spark Appliance to send a One Time Password (OTP) for Remote Access VPN by Email, in addition to SMS.

You can configure this behavior in WebUI or in Gaia Clish.

### Configuration in WebUI

1. From the left navigation panel, click **Device**.
2. In the **Advanced** section, click **Advanced Settings**.
3. Search for and select **Two-Factor Authentication - Enable selection of taget where to send the passcode (sms/email)**.
4. Click **Edit**.
5. Select or clear the checkbox:  
   * **Cleared** - The appliance sends the OTP by SMS **and** by Email (this is the default).
   * **Selected** - After an end-user clicks "Connect" in their Remote Access VPN client, in the next window the end-user must enter a mobile phone number to get the OTP by SMS, or enter an email to get the OTP by Email.
6. Click **Apply**.

### Configuration in Gaia Clish

1. Connect to the command line on the appliance.
2. If your default shell is Bash, then go to Gaia Clish:  
   `clish`
3. Configure the appliance:  
   `set vpn remote-access two-factor-authentication advanced-settings enable-target-selection-for-passcode { true | false }`  
   Where:
   * `false` - The appliance sends the OTP by SMS and by Email (this is the default).
   * `true` - After an end-user clicks "Connect" in their Remote Access VPN client, in the next window the end-user must enter a mobile phone number to get the OTP by SMS, or enter an email to get the OTP by Email.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content