topic Re: How to add MFA using Microsoft NPS and Firepower 2130 with FTD in Network Security

How to add MFA using Microsoft NPS and Firepower 2130 with FTD

doukkalli — Tue, 07 Apr 2020 09:36:39 GMT

Hi,

I configured RA VPN (AnyConnect) using Firepower 2130 FTD and Active Directory. All used belonged to the right group can connect to VPN using AnyConnect. They can access to our ressources (RFC 1918).

When I add Microsoft NPS as Radius servers to force multi-factor authentication no user is able to connect.

What is the best practice to add Microsoft NPS to support MFA on Cisco Firepower 2130 FTD.

All

FTD version: 6.5.0 (last patch)

FMC: 6.5.0 (last patch).

Re: How to add MFA using Microsoft NPS and Firepower 2130 with FTD

doukkalli — Tue, 07 Apr 2020 14:46:23 GMT

Issue solved.

You must configure the "Connection Request Policy" in Microsoft NPS with only and only the IP address of the inside interface of FTD.

In AAA select RADIUS Server Group in Authentication and Authorization only.

All other options remains unchanged.

Re: How to add MFA using Microsoft NPS and Firepower 2130 with FTD

Marvin Rhoads — Tue, 07 Apr 2020 17:18:44 GMT

Thanks for sharing your solution with the community.

Re: How to add MFA using Microsoft NPS and Firepower 2130 with FTD

doukkalli — Tue, 07 Apr 2020 17:58:45 GMT

I will share a complete setup in a docx or pdf format with screenshot and more.

Re: How to add MFA using Microsoft NPS and Firepower 2130 with FTD

vikasgupta2k — Mon, 29 Jun 2020 18:03:34 GMT

Can you share the solution document, trying to setup same setup and having issues.

Thanks

Re: How to add MFA using Microsoft NPS and Firepower 2130 with FTD

PhilScott15166 — Tue, 03 Nov 2020 22:37:51 GMT

Hi doukkalli,

Thanks for your post, would you be able to share the complete setup doc because I want to double check my Config as I am just getting login failed messages in the AnyConnect client.

Thanks

Phil

Re: How to add MFA using Microsoft NPS and Firepower 2130 with FTD

IamSamSaul — Thu, 11 Nov 2021 11:18:44 GMT

Hi Doukkali,

Is it possible to share with us the configuration document with us?

Thanks & Regards,

Sam

Re: How to add MFA using Microsoft NPS and Firepower 2130 with FTD

Michael Proctor — Mon, 15 Nov 2021 18:57:15 GMT

Can you advise how you were able to get this working?

Re: How to add MFA using Microsoft NPS and Firepower 2130 with FTD

DavidBB — Mon, 14 Nov 2022 13:48:20 GMT

Hi Doukkalli , do you have de docx or PDF ? thank you