Remote VPN access with RSA and Windows AD authentication?

[yuhuiyao]

All,

I am trying to implement RSA token for VPN users so that when they login through remote VPN, they will use token code for authentication.

It has been set up and tested ok. But currently the only credentials a user need is just the token code. Can I use windows AD password plus RSA token for user authentication? If so, do I have to do anything on the ASA side or the RSA server side?

Thanks!

[Scott Cannon]

Hi,

This is really a question for RSA as it is their system that provides the authentication methods. From what I understand of RSA devices, your objective is not supported (best you confirm with RSA though). RSA does support a password with token code but it is a password stored in the RSA security database and its a 4-8 numerical password (RSA call it a Personal Identification Number).

If your trying to achieve 2-factor authentication with 1 factor being the AD password you might want to look at a smartcard/certificate based solution.

Rgds

Scott