I would like to implement VPN access to our company servers (Windows/ADS). The problem is that we have confidential intellectual property we want to protect, and we are afraid that engineers are not the most creative people for creating hard passwords.
We use a sonicwall firewall.
Is there a way to demand double authentication to have VPN access? I mean, when a certain user tries to log-in via VPN, the VPN server sends an SMS (or via smartphone app – android or iphone) to the user that needs to be entered to gain full VPN access?
Best Answer
I recently installed duo two factor authentication and have been very happy with it. It can be configured to use a smartphone app with push notifications/otp or sms or phone calls. I set it up across my linux systems but there are integrations for widows and a variety of other devices/applications.