topic Two factor authentication - ACS Vs ASA in Network Security

Two factor authentication - ACS Vs ASA

rafael.samora — Fri, 21 Feb 2020 12:48:10 GMT

Hello,

I have one question about how to proceed (maybe one example or suggestion), to do authentication this way:

Current scenario:

ACS v5.x + Active Directory

ASA - SSL VPN (authentication)

Future scenario:

ACS v5.x + Active Directory and External RADIUS or OTP (One-time Password)

ASA - SSL VPN (authentication)

Thank you & Regards.,

Two factor authentication - ACS Vs ASA

nowen — Thu, 13 Dec 2012 19:01:34 GMT

You will want to use NPS, the MS radius plugin. It will let AD do the authorization based on the username and will proxy the username and OTP to your 2FA server.

We have a helpful eGuide on adding two-factor authentication to your network available without registration here:

http://www.wikidsystems.com/learn-more/two-factor-authentication-white-papers. There's a Cisco example network client as well as another VPN and Linux via PAM. (Really, you need to refer to the Cisco docs, it's just for guidance.) While the guide uses the WiKID two-factor system the rest applies to any setup.

HTH,

Nick

Two factor authentication - ACS Vs ASA

rafael.samora — Thu, 13 Dec 2012 19:31:08 GMT

Hello Nick,

Thank you for answer.

I'll check that.

My current scenario:

ACS v5.x + Active Directory (RADIUS)

ASA - SSL VPN (authentication radius)

I'll need to provide more one factor authentication with another "External Radius Server" and it will request to a OTP.

Regards.