Securing your Juniper SSL VPN with two-factor authentication.

Transcription

1 Securing your Juniper SSL VPN with two-factor authentication.

2 Protecting Your VPNs With Two-Factor Authentication Two-factor authentication provides a second layer of security to VPN credentials by requiring a second form of authentication to verify a user s identity with something they own (either mobile phones, push notifications, callback or tokens). Benefits of a Modern Two-Factor Solution A modern two-factor authentication solution provides a seamless user and administrative experience: No software required. Cloud-enabled two-factor solutions eliminate the need for onsite hardware and software. With Duo Security s drop-in integration package, you can protect your users in less than 15 minutes. Easy Deployment. With Duo Security s self-enrollment feature, users can sign up and choose their preferred authentication method with no training necessary, saving administrators time and significantly reducing help desk costs. Test before you buy. We allow you to try before you buy without impacting your production users, so you can test-drive our solution from a user and administrative perspective. Secure Your Juniper SSL VPN Products Providing secure remote access to your company s networks, a Juniper SSL VPN allows you to securely transfer private data online. These include: Juniper SA Series SSL VPN: SA2500, SA4500, SA6500 Juniper MAG Series Junos Pulse Gateways: MAG2600, MAG4610, MAG4611, MAG6610, MAG6611 Juniper IVE OS SSL VPN

3 5 Easy Steps to Integrating Juniper VPN with Duo Security s Two-Factor STEP 1 Sign up for a Duo Security two-factor account and log into your Duo Admin Interface. Create a new VPN integration with Duo, login, then configure your connection. STEP 2 Upload your custom package, and create a new authentication server.

4 STEP 3 Set up authentication for the LDAP server, including the secret key. STEP 4 Set up the authentication realm and password policy.

5 STEP 5 Finally, configure your Sign-In Policy to complete your integration. Then, test it out by logging in! Logging in with Junos Pulse Clients Duo Security also supports logging in with Juniper Junos Pulse clients, see the secondary password commands below for choosing the 2nd factor you want to authenticate with. Enter Passcode Push Phone SMS in order to... Log in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator. Push a login request to your phone (if you have Duo Mobile installed and activated on your iphone, Android, or BlackBerry device). Just review the request and tap "Approve" to log in. Authenticate via phone callback. Get a new batch of SMS passcodes. Your login attempt will fail log in again with one of your new passcodes.

6 A Two-Factor Success Story We were incredibly blown away at how our deployment went...this was the easiest deployment we ve ever done. I m really impressed. - Ivan Leichtling Security Manager, Yelp Yelp is one of the most widely-used resources for online business reviews. They chose Duo over competitors due to higher confidence in our security solution, and lower total cost of ownership. Yelp successfully deployed Duo Security s two-factor authentication to protect their Juniper VPNs and SSH, with 95 percent of their users using Duo Push. Duo Push is our secure mobile authentication method that allows you to authenticate with one tap of a button. Find out more in our Yelp Success Story: More Resources Juniper/Duo Documentation Review our step-by-step integration instructions with screenshots, alternate integrations, FAQ and more - Juniper/Duo Integration Video An easy, 5-min detailed integration walkthrough video showing you how to set up twofactor with Juniper - Create Your Free Account Today: Duo Security Detroit St. Ann Arbor, MI (734) Have questions or want to learn more/get a demo walkthrough? Contact one of our Duo representatives today! Contact sales: