topic Re: Identity Awareness and Legacy Client Authentication portal consolidation in General Topics

Identity Awareness and Legacy Client Authentication portal consolidation

Tiger_QAs — Wed, 07 Apr 2021 15:14:56 GMT

Hello Folks,

Our environment has both IA and Legacy authentication currently. Below are my Q's.

1. Is it possible to do MFA (Radius) in IA ? I
[If answer is NO to Question-1 then our query leads to Question-2]

2. Is it possible to consolidate both IA and Legacy portals ?

Any suggestions or recommendations are greatly appreciated!!

Re: Identity Awareness and Legacy Client Authentication portal consolidation

PhoneBoy — Wed, 07 Apr 2021 15:22:47 GMT

RADIUS authentication is supported for Captive Portal, yes.

Re: Identity Awareness and Legacy Client Authentication portal consolidation

Tiger_QAs — Wed, 07 Apr 2021 16:37:42 GMT

Thanks for a quick update Welch!

Our use case is to have MFA for only external contractors, As seen in below example firewall rules, We would like to leverage IA only for "External Contractors" rule.

So Is there a way to use AD group on "External Contractors" rule and also leverage MFA without disrupting IA rule ?

Re: Identity Awareness and Legacy Client Authentication portal consolidation

PhoneBoy — Wed, 07 Apr 2021 19:32:00 GMT

The difference would be how the identities are acquired (Captive Portal versus Active Directory) and the Access Role used.
But one should not impact the other.

Re: Identity Awareness and Legacy Client Authentication portal consolidation

Tiger_QAs — Tue, 24 Aug 2021 14:44:46 GMT

Hello Mr.PhoneBoy, Greetings!

I am trying to configure MFA using the RSA token to the Browser Based auth. Even after adding the SecureID server to my authentication setting it does not prompt me for my token when I used the Captive Portal and try browser based auth.

Is there a way to integrate MFA for Browser based authentication?

Note: I don't have remote access VPN configurations on my gateways.

Re: Identity Awareness and Legacy Client Authentication portal consolidation

PhoneBoy — Tue, 24 Aug 2021 16:50:09 GMT

As far as I remember, we currently don't support a specific prompt for a second factor.
I believe you enter the password plus the second factor as a single password entry.

Re: Identity Awareness and Legacy Client Authentication portal consolidation

the_rock — Tue, 24 Aug 2021 17:16:45 GMT

I implemented this for couple customers, but it can get little tricky. Say, for example, you have 500 people in your company and you want only 50 of them using Radius for MFA. Well, its not as easy as referencing that group in AD for radius auth, what we had to do is create local vpn users in dashboard and set their auth to Radius and then update the proper vpn/access role groups to allow them access. This is not sadly scalable for lots of users, but it does work. Message me privately if you want to do remote, Im happy to show you.

Cheers!