2 factor authentication with google authenticator

Options
124»

Comments

  • CoreSG
    CoreSG Posts: 40  Freshman Member
    First Anniversary Friend Collector First Comment
    Options
    Zyxel_Can said:
    Hi @Motivio,

    USG FLEX series with Google Auth 2FA already supported on Nebula.
    You can use  Secuextender IPSec VPN Client with Google 2FA for to your on cloud USG FLEX devices.

    For ATP series on cloud, please kindly wait for Q4.

    Hi @Zyxel_Can , could you please provide a direct link for documentation for this ?
    The current demo here https://flex500.zyxel.com/ext-js/index.html#
    only shows the old email or sms options :-/

  • Zyxel_Chris
    Zyxel_Chris Posts: 660  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options
    Hello @CoreSG

    Please refer to the attached documentation it has steps of how to configure 2FA on USG FLEX. :)

    Chris
  • Hoongks
    Hoongks Posts: 15
    First Anniversary First Comment
    Options
    you can use 2fa with yubico key if you have one via your pc
  • CoreSG
    CoreSG Posts: 40  Freshman Member
    First Anniversary Friend Collector First Comment
    Options
    Nebula_Chris said:
    Hello @CoreSG

    Please refer to the attached documentation it has steps of how to configure 2FA on USG FLEX. :)

    Nebula_Chris - awsome, thanks !


  • Scorpione
    Scorpione Posts: 34  Freshman Member
    First Anniversary 10 Comments Friend Collector
    Options
    And to use microsoft auth? I don't like google.
  • Asgatlat
    Asgatlat Posts: 81  Ally Member
    First Anniversary 10 Comments Friend Collector
    Options
    Scorpione said:
    And to use microsoft auth? I don't like google.
    +1, and many company use Office365 for productivity so they use microsoft auth too
  • dpipro
    dpipro Posts: 64  ZCNE Certified
    First Anniversary ZCNE Switch Level 1 Certification - 2020 ZCNE Nebula Level 1 Certification - 2020 ZCNE Security Level 1 Certification - 2019
    edited June 2021
    Options
    Hi, is this also valid for SSL VPN? Thank you
    Best regards
  • brischt
    brischt Posts: 9
    First Anniversary Friend Collector First Comment
    Options
    Is there any update on when 2FA for VPN users using Google Auth (or MS Auth) will be supported on non-cloud devices? (Zyxel VPN100, in our case) Thank you, Best Regards
  • lbocquet
    lbocquet Posts: 17
    First Anniversary Friend Collector
    Options
    Dear ZyXEL Team,

    For appliances with 4.65 firmware:

    1/ It is possible to rename "Google Authenticator" to "OATH Token based on HOTP, OCRA, or TOTP" in Users/Group -> Edit user -> Two-factor Authentication -> Enable Two-Factor Authentication -> Two-factor Auth. Method?
    Because there is not only the "Google Authenticator" application which supports it.
    - https://i.ibb.co/ZXWbNTh/User-Group-Edit-user-Two-factor-Authentication-enabled.png

    2/ It is possible to change:
    - Enable Two-Factor Authentication for VPN Access -> Enable Two-factor Authentication for VPN Access
    - Enable Two-Factor Authentication for Admin Access -> Enable Two-factor Authentication for Admin Access
    - https://i.ibb.co/RbyBkY1/User-Group-Edit-user-Two-factor-Authentication-disabled.png

    3/ There is a problem, in Object -> Auth. Method -> Two-factor Authentication -> Admin Access, choices are All/SMS/Email, there is not "OATH Token".
    - https://i.ibb.co/w0DYh3K/Object-Auth-Method-Two-factor-Authentication-Admin-Access.png

    4/ It is possible to add for VPN Access?
    - https://i.ibb.co/9r033GR/Object-Auth-Method-Two-factor-Authentication-VPN-Access.png

    Can you improve it?

    Thanks in advance.
  • skuers
    skuers Posts: 1
    Friend Collector
    Options
    Zyxel_Chris said:
    Hello @CoreSG

    Please refer to the attached documentation it has steps of how to configure 2FA on USG FLEX. :)


    Hi Chris,
    Thank you very much for this description. I followed it and was able to add Authenticator support to my account - until I realized that this is only for IPSec VPN.
    Is it planned to enhance the 2FA of SSL VPN to use Authenticator support too?
    And if, do you have an idea in which timeframe?
    Thanks in advance for this information.
    Kind regards,
    Stefan

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）