authenticating FMC administrator with 2-factor authentication

[vaibhav.parlekar1]

Hi,

We are planning to implement 2-factor authentication for administrators managing the firewalls. Can we authenticate the FMC administrator with 2-factor authentication. Couldn't find any documenation or configuration examples around it.

Vaibhav

[vaibhav.parlekar1]

guys,

any take on this one. is this functionality supported at all ?

Vaibhav

[Marvin Rhoads]

It isn't supported directly.

I haven't tried it; but if you are authenticating to a backend RADIUS server it should be able to use 2-factor for authentication and pass the results along to the FMC.

[mmcdermott@netvad.com]

Yes, TFA is supported.

We followed this article to implement:

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/214756-configure-duo-two-factor-authentication.html

[Marvin Rhoads]

As I noted 3 years ago, FMC is simply setup for authentication to an external RADIUS server. It knows nothing about 2-factor in itself.

The Cisco technote from July 2020 confirms the same.