FMC with FTD Series Limitation

[animesh.mishra]

Hi Team, 

Couple of Doubts:

1. Did FMC support Dual Factor Authentication for Anyconnnect APEX based licence. 

2. Is continuous sync needed or mandatory from FMC to FTD Appliance. If they are situated at different geo locations. 

Please help me on this, I am in middle of designing the solution. 

[yogdhanu]

Hi Animesh,

1:-You can integrate RSA with Radius or LDAP/AD for authentication of RAVPN which should achieve the dual factor auth for anyconnect.

This means that FTD itself does not directly talk to the RSA server for authentication but the RADIUS or LDAP/AD Server that is used for the authentication for RAVPN as first factor, after authenticating a valid RADIUS or LDAP/AD user, redirects it to RSA Server to prompt the user for an OTP or second password.

2:- Connectivity between FMC and FTD is required as without that many features including URL filtering based on category, malware protection and sand-boxing would not work.

Hope it helps,

yogesh

[animesh.mishra]

1. This is not called dual factor authentication. Will RSA/other will be integrate with FMC to send authentication or not ? Plz.
2. Any documents ? Plz.