Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have users that need to maintain an "always on" vpn connection to us as they regularly interact with some of our systems and exchange sensative data. Because of the sensativity of this data we are required to use two factor authentication - so we ...
1. Use certificate authentication and issue user certificates (Either with external CA server or using Local CA on ASA). Then, user will never have to enter passwords.For those Cisco Customers that must follow the PCI DSS (https://www.pcisecuritystan...