Has anyone setup two factor VPN using a Cisco ASA VPN solution?

[RAY LUDENDORFF]

Has anyone setup two factor VPN using a Cisco ASA VPN solution?

What sort of soft client based dual factor authentication options were used for the Cisco VPNs (e.g. Symantec VIP, Google authenticator, Azure authenticator, RSA, etc.)

I am trying to find what infrastructure is needed to come up with the solution.

[ewilliamson4922]

I've done with with RSA, DUO, LDAP, and RADIUS.

[bberry]

Anyone have any reference docs? We are looking at implementing two factor authentication and need to start the research. So far seems the RSA route is more towards the top of the scale and some free solutions towards the bottom of the scale. Mose seem to need a radius server of some sort but also seen references to LDAP. Want to see what options / solutions are out there and find the best fit. Just as an FYI we are in the process of deploying ISE on the desktrop side and know there is a way to integrate that into VPN as well. Not sure if that would be part of the two factor method or not.

Thanks .....

Brent

[Karsten Iwen]

For some time now, I only implemented DUO as the second factor (beside certificates). Have never had a system before that works that smoothly and is easy to handle from an admin- and user perspective.