ATP800 and 2fa for vpn users.

Options
mike4682
mike4682 Posts: 5 image  Freshman Member
First Comment Second Anniversary

I have an ATP800 deployed with several remote users connecting with secure_extender v4.0.5.0. I have attempted setup of the 2fa with google authenticator. I have made the user and vpn configuration changes and the police changes for port 8008. I can connect to the vpn but the browser does not pop for the 2fa. if i manually goto the address with port 8008 i get the "authenticate" screen. I can enter a code and it will authenticate. If i don't authenticate i can still access the resources thru the vpn. does the 2fa not work on the ATP series?

Accepted Solution

  • Zyxel_Tina
    Zyxel_Tina Posts: 642 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments
    Answer ✓

    Hi @mike4682,

    For the SSL VPN Client software, the authentication page does not pop up automatically, so users have to enter the correct URL manually in the browser (https://YourDeviceIP:8080).

    However, since you mentioned you can still access resources via VPN without 2FA authentication, could you please share more details—such as device firmware version, VPN configuration, 2FA settings, etc.—to help us investigate further? (Screenshots and any related info are welcome; PM me if they contain sensitive data.)

    Zyxel Tina

All Replies

  • Zyxel_Tina
    Zyxel_Tina Posts: 642 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments
    Answer ✓

    Hi @mike4682,

    For the SSL VPN Client software, the authentication page does not pop up automatically, so users have to enter the correct URL manually in the browser (https://YourDeviceIP:8080).

    However, since you mentioned you can still access resources via VPN without 2FA authentication, could you please share more details—such as device firmware version, VPN configuration, 2FA settings, etc.—to help us investigate further? (Screenshots and any related info are welcome; PM me if they contain sensitive data.)

    Zyxel Tina