topic Re: Mfa / 2fa ( SMB centraly managed) in Spark Firewall (SMB)

Mfa / 2fa ( SMB centraly managed)

lrossi89 — Thu, 21 Apr 2022 12:43:33 GMT

Good morning everyone,
Can anyone activate the Mfa/2FA with this scenario?

- 1600/1800 Gaia Embedded R80.X (Centrally Managed)

- Mgmt*

*precisely it is a Smart-1 Cloud

Re: Mfa / 2fa ( SMB centraly managed)

Chris_Atkinson — Thu, 21 Apr 2022 13:59:43 GMT

For Remote access VPN authentication or some other scenario?

Please refer sk159772.

Re: Mfa / 2fa ( SMB centraly managed)

the_rock — Thu, 21 Apr 2022 14:15:03 GMT

I dont have centrally managed SMB to test, but this is where you set that up in regular fw:

Andy

Re: Mfa / 2fa ( SMB centraly managed)

lrossi89 — Thu, 21 Apr 2022 15:00:25 GMT

yes, are for Remote Access via LDAP

I had already seen this SK, which actually says it is not supported.
I wanted to understand if someone had found an alternative solution.
More than anything else it is difficult to compete with other vendors without this functionality in 2022, agreed?

Re: Mfa / 2fa ( SMB centraly managed)

lrossi89 — Thu, 21 Apr 2022 15:03:06 GMT

I am trying to understand how to do it centrally managed (it seems that the SMB does not manage the challenge)

Re: Mfa / 2fa ( SMB centraly managed)

Chris_Atkinson — Thu, 21 Apr 2022 15:57:20 GMT

What would be your preferred flavour of MFA for use here?

Please communicate your requirement (RFE) with your local SE so it can be evaluated for inclusion in a future release such as R81.x

Note some 2FA/MFA providers can work with Radius.

Re: Mfa / 2fa ( SMB centraly managed)

G_W_Albrecht — Fri, 22 Apr 2022 09:10:54 GMT

Here we find an alternative that could work with centrally managed: sk137732: 2FA (Factor Authentication) support for remote access VPN in locally managed SMB appliances

Re: Mfa / 2fa ( SMB centraly managed)

lrossi89 — Mon, 30 May 2022 13:47:26 GMT

It is only for the locally managed 😞

Re: Mfa / 2fa ( SMB centraly managed)

G_W_Albrecht — Fri, 03 Jun 2022 08:11:08 GMT

No - part II is available for all Centrally Managed GWs, either by AD / LDAP MFA or using RADIUS MFA - see e.g. Remote Access VPN R81.10 Administration Guide p. 80, Office Mode - Using a RADIUS Server