Login to VPN with Google 2FA

Danee

Hi!

I have a Zyxel USG FLEX 200H firewall, with Firmware version: V1.21(ABWV.0), release date: 2024-07-11 06:36:08.
I would like my users to be able to use the VPN from the firewall with 2FA on connection, like Google Authentication.
Is it possible to setup with only the GUI of USG FLEX 200H, or do I need SecuExtender or Nebula for this function?

As for the GUI:
My test user can connect to the firewall-made VPN with ease, and I also enabled the 2FA option at the USER setup page. The user are not External ones by type.

At the "User Authentication" / 2FA menu I enabled VPN Access, chose "IPSec VPN Access" option and under "Delivery Settings" I used "user defined" https option with the WAN IP as "IP address", with default port.

I test this in Windows 10 and 11.
I set up Google Authentication for the test user with QR code. There is no popup in web browser (tested on Firefox and Chrome, with popups enabled), or in the Windows VPN login menu for Google Authentication.

How can I make the VPN login ask for 2FA confirmation?

Zyxel_Melen

Hi @Danee,

The 2FA setting is only to be setup on the GUI of USG FLEX H series.

The issue Windows 10 and 11 didn't popup the authorize webpage is normal behavior of Windows native VPN client. Please open the browser and enter "https://<configured interface or URL>:<configure port>" manually.

Zyxel_Melen

Hi @Danee,

The 2FA setting is only to be setup on the GUI of USG FLEX H series.

The issue Windows 10 and 11 didn't popup the authorize webpage is normal behavior of Windows native VPN client. Please open the browser and enter "https://<configured interface or URL>:<configure port>" manually.