Is this possible on UTM or only on Sophos Firewall?
community.sophos.com/.../sophos-firewall-enable-separate-3rd-input-box-for-sslvpn-mfa-instead-of-password-otp