Secure VPN remote access with Anyconnect

Posted on 2012-08-30
Last Modified: 2012-09-24
Hi expert ,

I would like to implement for 100x Ipad to access corporate internal LAN.  I would like to do with 2x Factor secure access with VPN box ,  i think ASA 5500 will be added.  

Question :

1. Do you consider for 2x factor  access , by allowing user go through 802.1x & public CA good enough ???  Some ppl say for 2x FA, second FA should be RSA toggle should be used :(

2. Can AnyConnect can auto provision and do self registration.

3. Can AnyConnect will consume the client certificate during the authentication process or will it forward it over to Radius(Windows MPS) for authentication.  

Question by:maxim168
    1 Comment
    LVL 22

    Accepted Solution

    1. Yes. As long as there are two entirely independent authentication mechanisms in place, you have a valid two-factor scheme. If username/password is one method, certificates, tokens, out-of-band challenge/response and many others are valid for your second. It depends on your requirements and preferences.

    2. It sure can.

    3. Username/password authentication is handled through LDAP or RADIUS, but certificate authentication is verified by a certificate authority. You will need to set up a CA on your Windows server to handle this.

    Featured Post

    Live: Real-Time Solutions, Start Here

    Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

    Join & Write a Comment

    Suggested Solutions

    This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
    Envision that you are chipping away at another e-business site with a team of pundit developers and designers. Everything seems, by all accounts, to be going easily.
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    This video discusses moving either the default database or any database to a new volume.

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now