Email 2FA with different port than 443

zdenek

Hello,

we would like to use 2FA with Email (or Email-to-SMS), but we use port 8443 on our firewall to access device. Default port (443) is reserved for our mailserver. I try to enter Autorize Link URL Addres with port number (like fqdn:8443) but this is not possible.

Thanks for any suggestions.

Zdenek

Zyxel_Emily

Hi @zdenek,

If you use port 8443 on the firewall to access device, change the HTTPS port in CONFIGURATION > System > WWW > Service Control.

Create a new service object for port 8443 in CONFIGURATION > Object > Service > Add.

Go to CONFIGURATION > Object > Service Group > Default_Allow_WAN_To_ZyWALL and move the service object port 8443 to Member.

In CONFIGURATION > Object > Auth. Method > Two-factor Authentication > VPN Access, tick “Enable” and enter the WAN IP address of ZyWALL.

In CONFIGURATION > System > Notification > Mail Server, configure mail server.

Enter the email address for the user for 2FA authentication.

When VPN client is trying to build the tunnel, the user receives the email and click the button “Authorize”.

The user is successfully authenticated.

Zyxel_Emily

Hi @zdenek,

If you use port 8443 on the firewall to access device, change the HTTPS port in CONFIGURATION > System > WWW > Service Control.

Create a new service object for port 8443 in CONFIGURATION > Object > Service > Add.

Go to CONFIGURATION > Object > Service Group > Default_Allow_WAN_To_ZyWALL and move the service object port 8443 to Member.

In CONFIGURATION > Object > Auth. Method > Two-factor Authentication > VPN Access, tick “Enable” and enter the WAN IP address of ZyWALL.

In CONFIGURATION > System > Notification > Mail Server, configure mail server.

Enter the email address for the user for 2FA authentication.

When VPN client is trying to build the tunnel, the user receives the email and click the button “Authorize”.

The user is successfully authenticated.