Netscaler Quick guide for SMS PASSCODE SMS PASSCODE 2014

Transcription

1 Netscaler Quick guide for SMS PASSCODE SMS PASSCODE 2014

2 Prepare Citrix Netscaler for SMS PASSCODE. This document outlines the setup of Citrix Netscaler for SMS PASSCODE. As a Prerequisite, you must have a virtual server on the Netscaler with an authentication server set up with Radius Authentication. Furthermore, you will need a Microsoft Radius server Configuration of the Authentication server for SMS PASSCODE The authentication type: Radius Time-out: 10 (optional) Passcode Encoding: PAP Shared secret must be the same secret as set in the NPS s radius client (For configurations of the MS radius server please refer to the SMS PASSCODE administrators guide). Checkmark the Send the Calling Station ID in order to send the End User IP. * Send Calling station ID is not present in Netscaler versions earlier than Page 2 of 6

3 Configuring RADIUS Protection on Windows Server 2008 / 2012 The procedure for configuring RADIUS authentication using SMS PASSCODE on a Windows Server 2008 or Windows Server 2012 is: 1. Configure all RADIUS clients in the usual way by specifying the NPS server as the RADIUS server. If you are in doubt how to perform the configuration, please refer to the configuration guide of the specific RADIUS client in question. Important: The user experience is best for RADIUS clients supporting Challenge Response. If Challenge Response support is configurable on the RADIUS client, please enable it. 2. Start the NPS Management Console: a. Select Run in the Windows Start menu b. Enter nps.msc c. Click OK 3. The NPS Management Console is shown. 4. Now you must create all your RADIUS Clients in the NPS Management Console. If these have already been created beforehand, you can skip to step 9. Page 3 of 6

4 5. To create a RADIUS Client: a. Right-click the RADIUS Clients node. b. Select New RADIUS Client. Page 4 of 6

5 6. The New RADIUS Client dialog appears. a. Enter a friendly name of the RADIUS Client. b. Enter the IP address of the RADIUS Client. c. Enter and confirm the Shared Secret. It must match the shared secret configured on the RADIUS Client. d. Click OK. 7. The RADIUS Client that you have created will appear in the right-hand pane: 8. Repeat steps 5-7 if you need to create more RADIUS Clients. Page 5 of 6

6 9. This completes the configuration of RADIUS authentication using SMS PASSCODE. Please test each RADIUS client to make sure that RADIUS authentication works as expected. Note: By default, settings of Connection Request Policies (CRP) and Remote Access Policies (RAP) are ignored during SMS PASSCODE authentication. However, you can enable internal IAS/NPS logic to apply CRP/RAP settings in the SMS PASSCODE Configuration tool. About SMS PASSCODE SMS PASSCODE is the leading technology in two- and multi-factor authentication using your mobile phone. To protect against the rise in internet based identity theft hitting both consumers and corporate employees, SMS PASSCODE offers a stronger authentication via the mobile phone SMS service compared to traditional alternatives. SMS PASSCODE installs in minutes and is much easier to implement and administer with the added benefit that users find it an intuitively smart way to gain better protection. The solution offers out-of-the-box protection of standard login systems such as Citrix, Cisco, Microsoft, VMware View, Juniper and other IPsec and SSL VPN systems as well as web sites. Installed at thousands of sites, this is a proven patent pending technology. In the last years, SMS PASSCODE has been named to the Gartner Group Magic Quadrant on User Authentication, awarded twice to the prestigious Red Herring 100 most interesting tech companies list, a Secure Computing Magazine Top 5 Security Innovator, InfoSecurity Guide Best twofactor authentication, a Citrix Solution of the Year Finalist, White Bull top 30 EMEA companies, a Gazelle 2010, 2011, 2012 and 2013 Fast Growth firm and a ComOn most promising IT company Award. For more information visit: or our blog at blog.smspasscode.com. Page 6 of 6