ASA and RSA SecureID

[amisseri]

We are currently using checkpoint and are moving to ASA5520. We also have a clientless SSL vPN appliance to roll into the ASA too.

My question is, how can I use the ASA for SSL VPN and IPSec VPN with RSA secureID? Can I do this for a select group of users, because most of the population do not have secureID tokens?

[daviddtran]

well, short answer is NO. You can not use

native SecurID in ASA as you would in checkpoint

because you can not store the sdconf.rec file on

the ASA as you would with Checkpoint.

The work around is to enable Native Radius

Server on the RSA Server and you still have

two-factor authentication.

That's how the old Pix 6.x works with RSA

SecurID

[Danilo Dy]

http://rsasecurity.agora.com/rsasecured/guides/imp_pdfs/Cisco_ASA_AuthMan61.pdf