RA VPNs with Smart Cards

[Xavier Lloyd]

Hi all,

I was wondering, how much can you integrate Remote Access VPNs with SmartCards or some other 2 factor authentication?

Can this work with IPSec RA VPNs?

What about SSL VPNs (clientless/full client mode)?

Will I need to use ACS to do this?

Any insight into this would be greatly appreciated! Thanks much!

~Xavier

[Patrick Tran]

Hi,

I use SSL VPN (clientless and client mode) with certificate on smartcard (Token). It works great.

You don't need to use ACS but you can.

ASA does certificate authentication (certificate validation) and authorization (retrieving user in Active Directory with certificate field and matching AD group)

HTH

Patrick