Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions 2fa on client vpn

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
+1 person also asked this people also asked this
Locked Locked
Replies 6 replies
Subscribers 39 subscribers
Views 2211 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

2fa on client vpn

Dan Allen1 over 4 years ago

Any word on Duo 2fa on client vpn in v18? I recall it being a feature update but don't see it in the feature list on this page

This thread was automatically locked due to age.

Parents

0 lferrara over 4 years ago

Dan, what do you mean 2FA on Client VPN?

For SSL VPN and IPSEC VPN, XG already supports 2FA.

https://community.sophos.com/kb/en-us/125228
Cancel
Vote Up 0 Vote Down

Cancel
0 Dan Allen1 over 4 years ago in reply to lferrara

thanks for reply. my understanding was that there was to be added support for Duo 2fa in SFOS v18.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to Dan Allen1

On v18, Radius timeout is now configurable.

https://docs.sophos.com/nsg/sophos-firewall/18.0/releasenotes/en-us/nsg/sfos/releasenotes/rn_RadiusTimeout.html?hl=radius

Is that enough to allow DUO to complete the authentication process?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 4 years ago in reply to Dan Allen1

On v18, Radius timeout is now configurable.

https://docs.sophos.com/nsg/sophos-firewall/18.0/releasenotes/en-us/nsg/sfos/releasenotes/rn_RadiusTimeout.html?hl=radius

Is that enough to allow DUO to complete the authentication process?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Dan Allen1 over 4 years ago in reply to lferrara

apparently the ability to configure/extend the timeouts was what they were "told" was coming in v18. Not sure what their source was though.
Cancel
Vote Up 0 Vote Down

Cancel
+1 lferrara over 4 years ago in reply to Dan Allen1

Dan,

I made a mistake during the typing. I wrote "is not" instead of "is now".

Anyway timeout on v18 is supported. You can configure it via web interface.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dan Allen1 over 4 years ago in reply to lferrara

Thanks much Luk. You admittedly had be concerned there for a minute!
Cancel
Vote Up 0 Vote Down

Cancel