IPSEC VPN can do with 2FA

[jewfcb001]

Hi All ,

I would like to know IPSEC VPN on Cisco ASAv can do with 2FA or not ? 

-  The first authentication with Radius Server 

- The Secondary authentication with 2FA (RSA,VASCO,DUO)

And Application Client VPN with shrew vpn

[Francesco Molino]

Hi

I don't use shrew client but i use duo for authentication on some ipsec vpn and 2FA works.

Here a link of duo configuration: https://duo.com/docs/cisco-ipsec

With duo as a proxy it can send the authentication to your local radius (ise for example) and provide the mfa as well:

https://duo.com/docs/ciscoise-radius

[jewfcb001]

@Francesco Molino  

Thank you for  information . that the information I think document reference software VPN Client with Anyconnect but I'm not sure if I use

shrew vpn can we do it?  Please confirm me again.

[Francesco Molino]

The vpn client is just comnecting to the box. The box has to have the right radius server with the mfa happening. 

The doc is not related to anyconnect but more asa and duo.

[jewfcb001]

@Francesco Molino 

Thank you for you answer . I have a small question . what is the vpn client application from your link?

I see anyconnect from your document. I  worry if I not use anyconnect vpn client that cannot implement this solution.

https://duo.com/docs/ciscoise-radius