Will there be a Google Authenticator für VPN-Access?

Michael_I

Hi,

will there be a Google Authenticator für VPN-Access?
That would be a great feature.

best regards

MikeForshock

Something needs to be addressed.
We use 2FA for VPN at our locations and if we disable the HTTPS service for the latest incident mitigation, we cannot access the VPN!

Zyxel_Emily

Hi @Michael_I,

Currently only USG FLEX series on cloud support Google Authentication for VPN access.

You can find the document which guides you how to configure 2FA on USG FLEX on cloud.

https://community.zyxel.com/en/discussion/1685/2-factor-authentication-with-google-authenticator/p4

 

@MikeForshock,

We're aware of the limitation that 2FA uses management port (HTTPS) only.

We will discuss the behavior internally and then enhance the feature.

Michael_I

@Zyxel_Emily

Thanks,

are there plans to implement this on the ATP, too?

Zyxel_Emily

Hi @Michael_I,

ATP series on cloud also support Google Authentication for VPN access, and it will be ready in Q4 2021.

@MikeForshock,

The feature will be enhanced in the next official version. It will be included in next release

Asgatlat

Zyxel_Emily said:

Hi @Michael_I,

ATP series on cloud also support Google Authentication for VPN access, and it will be ready in Q4 2021.

not for Zywall series ?

Michael_I

@Zyxel_Emily
I´m confued, too. What means this "on cloud". For exaple Atp Series on cloud or USG Flex series "on cloud"?


Thank you.

Zyxel_Vic

Hi @Michael_I
Sorry for confusing, on-cloud means that when the device is managed by Nebula Control Center (NCC). USG Flex series have 2 different modes, On-premise --> which means the firewall works as a standalone device and only can be managed on "device" directly, On-cloud --> means the device is managed from the NCC portal which is easier to manage multiple devices in one place (NCC)

Michael_I

@Zyxel_Vic
Thanks. We´re a small company with only one ATP. That means I need nebula in the future to use Google Authentication for VPN access in the future, or is there a plan to develop it for the standalone, too?

Then i need a licence for the msp pack, right?