Google Authenticator App Usage With SSL VPN On Flex 100H Question

JCE
JCE Posts: 16  Freshman Member
First Comment Friend Collector Third Anniversary
in Security

Hi,

We have just purchased a Flex 100H and about to setup SSL VPN

Am I correct in thinking that if you setup a SSL VPN User to use Google Authenticator as the 2FA option you have to manually go to the Zyxels 2FA site after connection to input the code ?

We plan on using the Secuextender Client

If so is there a way to automate this to make it more user friendly for the remote workers ?

Or is there a better VPN option in the Flex i.e. LT2P, Ipsec that would make it easier ti implement Google Authenticator.

Many thanks for your time.

Accepted Solution

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,376  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓

    Hi @JCE,

    2FA Google Authenticator for VPN access will be supported in the next firmware 1.20.
    When you use VPN Client (VPN Client IPSec_SSL_VPN_7.7.40.019) to open IKEv2/SSL VPN tunnel, the 2FA authentication page for will pop up automatically when the tunnel is opened.

    image.png

All Replies

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,376  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓

    Hi @JCE,

    2FA Google Authenticator for VPN access will be supported in the next firmware 1.20.
    When you use VPN Client (VPN Client IPSec_SSL_VPN_7.7.40.019) to open IKEv2/SSL VPN tunnel, the 2FA authentication page for will pop up automatically when the tunnel is opened.

    image.png

  • JCE
    JCE Posts: 16  Freshman Member
    First Comment Friend Collector Third Anniversary
    https://community.zyxel.com/en/discussion/comment/59414#Comment_59414

    Hi Emily,

    Many thanks for your reply.

    Do we have an idea when Firmware 1.2 will be released as we bought this 100H to replace a USG 40 for which we were running SSL VPN with 2FA via Email Link and now we cant have any form of 2FA for VPN on the new device which seems a step backward in security for us.

    Also can you still use the Secu Extender SSL VPN Client V4 to connect to the 100H vis SSL VPN or do you now have to purchase the more advanced client or use Open VPN client ?

    Thank you for your time.

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,376  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @JCE,

    The next official firmware 1.20 will be released in Apr. 2024.

    You need to use IPSec_SSL_VPN_7.7.40.019(Windows) to establish SSL VPN to USG FLEX H device.

    https://community.zyxel.com/en/discussion/19965/does-vpn-client-ipsec-ssl-vpn-7-7-40-019-work-with-atp-usg-flex

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）