DUO AUTHENTICATION PROXY FOR WINDOWS LOGON

[mickieyo01]

Hi everyone,
I am trying to protect windows logon using Duo authentication proxy, at the point where I am to input the IP address and port of the proxy server, it keeps saying "cannot connect to the server". On what port does the Authentication proxy listen 

[ccieexpert]

that proxy is for a https proxy.. not for authentication proxy.

the Duo windows login does not use the authentication proxy. It talks directly to duo.. so leave the proxy unchecked unless you have a https proxy in the path.

please follow this document:

https://duo.com/docs/rdp

**rate as helpful if this was useful**

[mickieyo01]

Hello there, yes I know that there is a method for the server to talk directly to duo, but it is a critical internal server that we did not expose to the internet. So is there a way to point the server to the authentication proxy instead of talking directly to Duo?

[jrrg091]

Totally get where you’re coming from—keeping internal servers off the internet is smart. Yes, you can configure the Duo Authentication Proxy to handle communication with Duo’s cloud while your internal server points only to the proxy. More setup info is on Duo’s official website.

[ccieexpert]

https://duo.com/docs/authproxy-reference#http-proxy-section

[mickieyo01]

Hello, so I configured a [http_proxy] section and used port=8080 on the authentication proxy config file. I checked the "use manual proxy" during the installation of the windows logon. I put the IP of the auth proxy and port 8080, now the server can reach the authentication proxy, and it works fine.

However, is it possible to walk me through the steps to implement this same method, but on a linux server?

[ccieexpert]

Sorry i think the config is the same for duo linux vs windows:

https://duo.com/docs/authproxy-reference#http-proxy-section

did you put the config there..did you put the http_proxy section there ?