Two factor authentication for Cisco ASA

[jackfait1]

I would like to use two factor/radius for access to the Cisco ASA for different Users

This would be for the GUI and CLI. I was wondering if anyone could direct me to some good documentation/instructions I could refer to.

Thanks

Jack

[balaji.bandi]

there is a good post for multifactor authentication :

https://community.cisco.com/t5/vpn/two-factor-authentication-recommendations-for-asa-5510-vpn/td-p/2079441

[ToucanzooX]

Which two factor auth are you trying to use.  It is pretty slick using Cisco Duo.

[jackfait1]

RSA two factor for admin access to the ASA

[Marius Gunnerud]

Are you looking for two factor for admin access to the ASA or for VPN access?

[jackfait1]

Hello,

I want to do two factor for admin access to the ASA

Thanks

[Marius Gunnerud]

I am not sure if this is possible.

If you have a RADIUS server, such as ISE, then you might want to try setting the ISE up to use the twofactor authentication server as an external identity source and then the configure the two-factor authentication server to poll AD for credentials as well as send a two-factor authentication push to the useres mobile phone.  I have not tried this, but it might be possible.

This way it is the ISE that is sending an accept or reject to the ASA depending on the reply from the two-factor authentication server.  

If you are trying to do this directly from the ASA itself, this is not possible.