asked on

Can Vasco and RSA token authentication co-exist?

We currently have around 100 RSA secure ID token which are currently very popular among our user base. They use these tokens to connect via Citrx Secure Gateway over the Internet to a Citrix application server. Management has decided that RSA is too expensive and do not wish to invest in any more tokens for additional users.

So we are looking for a cheaper solution - In this case, we are looking at Vasco. From what I understand, if we decided to switch to Vasco, we would be unable to use the existing RSA tokens to access the Citrix system. This would mean we would have to throw away our existing RSA tokens and purchase a whole set of Vasco ones. Spending money to save money.

Is it possible to authenticate on the Citrix Secure Gateway using either RSA or Vasco tokens? If not, can anyone suggest a way or use for the already paid for RSA tokens?

Dave Howe

As I understand it - Yes. the VACMAN solution allows for it to "backend" any radius authentication attempts it doesn't find in its database to another radius server, which could be (in this scenario) your existing RSA solution.

I must admit I haven't tried this though. Might be worth you getting a vasco eval in (they do time limited licence eval kits, and the vacman software will install easily and happily to any windows machine running 2000 or better) and building a trial setup so you can be sure it will work before you part with any cash :)

netadminsge

ASKER

Thanks for the suggestion. I'll try and organise a trial with VASCO and see what we can do. I was hesitent in trying this because it may break the RSA solution with has become a critical production system.

In the mean time I'll leave this question open in case anyone else has further information or suggestions.

ASKER CERTIFIED SOLUTION

Dave Howe

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

netadminsge

ASKER

That's a good idea. I guess it dosn't really matter what it authenticates to, just that it authenticates RSA tokens.

I'm trying to arrange a Vasco trial now and will try that setup once I've got it all organised.

Thanks for your suggestions.