VPN 2FA

[Jobos]

Hi,

We in the process of testing VPN and looking at the feasibility of including 2FA into the mix. So far we have a Sophos UTM 9 as the gateway and using SSL VPN which works ok. Looking at the logs I see a small number of failed VPN logons each day so am conscious that this will only get worse hence the thoughts of 2FA.

 

So the reason of this post is just to see how many other schools use 2FA and do staff manage to logon ok?

 

Thanks in advance.

[kearton]

*bump*

Is anyone using 2FA?

[jamesfed]

The 3 of us in the IT Office are now using Smart Cards (USB card reader with a SIM inside) which ticks 2FA with something you own (the card) and something you know (the PIN to unlock the card) - with these we have 3x accounts (personal, domain admin and local admin) and can use the personal account for PC login and......certificate based authentication for VPNs.

 

Worth a look into and if you are using NPS for RADIUS auth you may already have a PKI setup.

 

USB Reader - Gemalto GemPC Shell Token V2 (IDBridge K30) - in stock at Smartcard Focus

Smart Card - Gemalto IDPrime .NET smartcard – SIM cut - in stock at Smartcard Focus