New feature introduction: Two-factor authentication/2FA enforcement at the Org level

Zyxel_Melen
Zyxel_Melen Posts: 2,638  Zyxel Employee
Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
edited January 7 in Org-wide settings

Organization Access with 2FA Enforcement is a robust security feature in Nebula Control Center that strengthens access control for administrator accounts. This feature proactively identifies and restricts access from administrator accounts at heightened risk of compromise, ensuring an additional layer of protection for your network infrastructure.
By enforcing Two-Factor Authentication (2FA), the system requires administrators to verify their identity through two separate authentication methods before gaining access to critical network resources. This multi-layered approach significantly reduces the risk of unauthorized access, even if administrator credentials become compromised.

How to enable 2FA enforcement?

Nebula admin (organization owner, delegate, full admin) can enable 2FA enforcement via this path "Menu > Organization-wide > Organization-wide manage > Organization settings > Security."

Note:

  1. Zyxel accounts utilizing Google or Apple login methods are incompatible with 2FA enforcement at the Org level.
  2. You can enable this feature when the current login account enables 2FA.
  3. After enabled, all administrators in the organization will be forced to log out.

Why can't I enable 2FA enforcement?

To enable 2FA enforcement, your account should not be utilizing Google or Apple login methods and the current login account needs to enable 2FA. If the current login account enables 2FA, please refresh the page or re-login.

What will happen if the admin doesn't enable 2FA when 2FA enforcement is enabled?

She/he can find this organization but can't access it on the organization list selection page.

What can I do if I use Google/Apple Account to log in?

If you use Google/Apple Account to log in, please contact Zyxel Support to change your account login method.

Zyxel Melen