SSL VPN 2FA options - or how to prompt for the OTP token?

Question

I'd like to roll out SSLVPN to some of our users, but the password concatenated with the OTP code is very awkward.... 
 You can't save the password, and you can't easily use a password manager either. 
 Is there some way or 3rd party software that will give me a separate OTP code prompt like we're used to? 
 I did see a note from years ago that Sophos Connect 2.0 would do this , but I've tried 2.3.2 and it doesn't seem to? (I'd also note the window disappears if you click away from it, and it doesn't handle hi dpi displays right either :-/ ) Suggestions appreciated...

philbert · Answer

Have a look at the Provisioning file template for the Sophos Connect: https://docs.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/RemoteAccessVPN/IPsecSSL/SophosConnect/RAVPNSConProvisioningFile/index.html#templates 
 [ { "otp": true, "can_save_credentials": true, } ] 
 These Options should do what you want. 
 Then you could deploy the file for your Users and the connect client will get the VPN config from the firewall.

SSL VPN 2FA options - or how to prompt for the OTP token?

Top Replies