This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

OTP not working with VPN-Users do not need OTP

Hello,

I have setup OTP on our UTM ver. 9.711-5 according to the UTM admin guide. Under OTP I have User Portal and SSL VPN Remote access enabled. I do not have all users must use OTP enabled and have the users individually selected. The users are pulled from AD.

Under Authentication services- Servers I have my 2 Domain controllers listed and my radius server, in that order. Users connecting via VPN are authenticated via RADIUS server.

The users can login to the portal page and scan their QR code and are able to login using the PW+OTP, however when the users connect to the VPN, they are able to login just with PW and dont need the OTP. Hash is SHA1.

Remote access is setup for both PPTP and L2TP over IPsec.

Does anyone have any idea as to where I could start to diagnose the problem?

Thanks in advance.

This thread was automatically locked due to age.

Top Replies

Marco Franceschi over 1 year ago in reply to Raphael Alganes +1

ok thanks very much for the answer, much appreciated

Parents

0 Raphael Alganes over 1 year ago

Hi Marco Franceschi

Many thanks for reaching out to Sophos Community and hope you are well.

Please see this other post on UTM Forum about few days ago: RE: OTP with L2TP over IPSec VPN OTP on L2TP over IPsec might not be supported at the moment. That's why it is only working for your mentioned sections above (User Portal/SSL VPN).

Hope this helps and thank you for choosing Sophos.

Regards,

Raphael Alganes
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Marco Franceschi over 1 year ago in reply to Raphael Alganes

Hi Raphael

Thanks i did read this through but should it not work if I have PPTP VPN connections then?
Cancel
Vote Up 0 Vote Down

Cancel
+1 Raphael Alganes over 1 year ago in reply to Marco Franceschi

MFAs/OTP not currently available for L2TP and PPTP VPNs. It is available as of now for IPSec or SSL VPN RA, WebAdmin, UserPortal, WAF, Shell, Hotspot

Raphael Alganes
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

+1 Raphael Alganes over 1 year ago in reply to Marco Franceschi

MFAs/OTP not currently available for L2TP and PPTP VPNs. It is available as of now for IPSec or SSL VPN RA, WebAdmin, UserPortal, WAF, Shell, Hotspot

Raphael Alganes
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

+1 Marco Franceschi over 1 year ago in reply to Raphael Alganes

ok thanks very much for the answer, much appreciated
Cancel
Vote Up +1 Vote Down

Cancel