A whole bunch of Cisco Two-factor Tutorials

admin
2015-01-29T22:10:00+00:00

We've spent some time in our lab with a Cisco ASA 5500 series VPN and we have posted a few of tutorials:

How to add two-factor authentication to an ASA 5500 via RADIUS. This is the basic setup: you want two-factor authentication for your remote users on your Cisco ASA. Note as always, we recommend you put NPS or another Radius server between your VPN and WiKID. Note that this setup should work for any two-factor authentication server that supports radius. That's the benefit of using a standard protocol!

How to configure the ASA 5500 for two-factor auth via the console. Same goal: two-factor for all your VPN users, but via the console. Much simpler really.

How to protect the Cisco ASA Admin interface with 2FA. One problem enterprises have is shared admin passwords. Companies should really add two-factor authentication to all administrative accounts where possible. Obviously these logins should run through your directory via NPS or another radius server too.

How to add mutual HTTPS authentication to the ASA SSL VPN. Here's a neat trick that will thwart most network-based MiTM attacks using WiKID's mutual https authentication. If you are worried about users connecting via dubious wifi networks, check this one out.

If you have general questions about how to architect your network for two-factor authentication, see our eguide.

Download the WiKID Strong Authentication Enterprise server. It is free for up to 5 users and only $24 per user per year after that!

The complete list of Cisco tutorials is here . Let us know if there is something else you'd like to see!