Mfa / 2fa ( SMB centraly managed)

[lrossi89]

Good morning everyone,
Can anyone activate the Mfa/2FA with this scenario?

- 1600/1800 Gaia Embedded R80.X (Centrally Managed)

- Mgmt*

*precisely it is a Smart-1 Cloud

[Chris_Atkinson]

For Remote access VPN authentication or some other scenario?

Please refer sk159772.

[lrossi89]

yes,  are for Remote Access via LDAP

I had already seen this SK, which actually says it is not supported.
I wanted to understand if someone had found an alternative solution.
More than anything else it is difficult to compete with other vendors without this functionality in 2022, agreed?

[Chris_Atkinson]

What would be your preferred flavour of MFA for use here?

Please communicate your requirement (RFE)  with your local SE so it can be evaluated for inclusion in a future release such as R81.x

Note some 2FA/MFA providers can work with Radius.

[G_W_Albrecht]

Here we find an alternative that could work with centrally managed: sk137732: 2FA (Factor Authentication) support for remote access VPN in locally managed SMB appliance...

[lrossi89]

It is only for the locally managed 😞

[G_W_Albrecht]

No - part II is available for all Centrally Managed GWs, either by AD / LDAP MFA or using RADIUS MFA - see e.g. Remote Access VPN R81.10 Administration Guide p. 80, Office Mode - Using a RADIUS Server

[the_rock]

I dont have centrally managed SMB to test, but this is where you set that up in regular fw:

Andy 

[lrossi89]

I am trying to understand how to do it centrally managed (it seems that the SMB does not manage the challenge)