Smoothwall VPN MFA

[synaesthesia]

Are there any plans for Smoothwall to implement MFA on their VPN solutions? In 2024, that might be a big tick to cover what's easily it's weakest point. The documentation says "at the time of writing.... doesn't support 2FA" which gives a slight glimmer of hope!

[robintech]

Would be nice to have

[ibpalle]

I don't think it's on the roadmap in any serious way.

[synaesthesia]

I don't think it's on the roadmap in any serious way.

 

Massive shame From an outside perspective it's not the best look for something providing security and safeguarding.

[5tu]

We're in the process of moving to Microsoft Entra Private Access for this very reason.

[tom_newton]

So there may be GSuite/Azure link in our next-but-one version (Newport) but it's not guaranteed.

At the moment, of course, you have certificate, and password - so the password doesnt work on any fool's computer if they dont have the cert, so you do have a second factor, and it does offer protection from (eg) credential stuffing

[synaesthesia]

So there may be GSuite/Azure link in our next-but-one version (Newport) but it's not guaranteed.

At the moment, of course, you have certificate, and password - so the password doesnt work on any fool's computer if they dont have the cert, so you do have a second factor, and it does offer protection from (eg) credential stuffing

 

This is actually a good point - I keep forgetting the certificate for the connection is embedded in the ovpn file imported. That may well suffice!