Two-Factor Authentication for Pulse Connect Secure SSL VPN with Duo |
VPNGoupCom Herkes çevrimiçi güvenlik ve gizlilik konusunda endişe ve kişisel bilgilerini ve tarama alışkanlıkları ortaya istemiyoruz, VPN harika bir çözüm
(upbeat instrumental music) – [Teacher] Hi, I'mMatt from Duo Security.
On this movie I will teach you how to safeguard your PulseConnect Secure SSL VPN with Duo.
Make sure to reference the documentation for this configuration atduo.
com/docs/pulseconnect.
Before starting the set up procedure, make sure that Duo iscompatible with the Pulse VPN.
Go surfing for your administrator World wide web interface and verify that yourfirmware is version 8.
two.
Additionally, you'll want to Have got a useful primary authentication configuration in your SSL VPN people, like LDAP authenticationto Energetic directory.
(upbeat instrumental music) Log in to the Duo admin panel.
(upbeat instrumental new music) While in the remaining aspect bar, simply click programs.
Click “Safeguard anapplication” and kind juniper inside the look for bar.
Underneath the entry for Juniper SSL VPN, click on secure this application.
Your integration essential, secretkey, and API host name are provided with the topof the Attributes website page.
You will need these afterwards in the course of setup.
Simply click the website link to downloadthe Duo Juniper eight.
x offer.
This file is custom made on your account and has your Duo account IDappended to your file name.
Note that Duo's Juniper configuration is compatible with Pulse Join Protected and you'll alter the displayname of the application at The underside of your Houses page.
For easy reference, changethe name of the application to Pulse Connect Safe VPN.
(upbeat instrumental audio) Click preserve variations.
(upbeat instrumental tunes) Now modify the check in page.
Log in towards your Pulse Connect Safe administrator World wide web interface.
(upbeat instrumental music) In the best menu, navigateto authentication, signing in, check in pages.
(upbeat instrumental music) Simply click upload personalized pages.
(upbeat instrumental audio) From the name subject, kind Duo.
Established site kind to Entry.
(upbeat instrumental music) Close to templates file, click on Search and select the Duo Juniper zip file you downloaded with the admin panel.
Usually do not pick out the “use customized webpage for Pulse desktop client logon” or “prompt the secondary qualifications on the next site” alternatives, If they're existing.
Check the skip validationchecks during upload box.
Click upload custom made webpages.
You may ignore any warnings that show up.
Subsequent increase the Duo LDAP server.
Open up a different browser window and navigate to duo.
com/docs/pulseconnect.
(upbeat instrumental tunes) Scroll all the way down to the “Include theDuo LDAP Server” portion of your documentation.
There are strings you cancopy from this segment to generate set up less complicated.
(upbeat instrumental audio) In the highest menu of youradministrator interface, navigate to authentication, auth servers.
(upbeat instrumental tunes) While in the auth server typelist, pick LDAP server.
Simply click new server.
(upbeat instrumental new music) From the name discipline, style Duo-LDAP.
From the LDAP server area, enter your API hostname from the software’s properties page while in the Duo admin panel.
(upbeat instrumental music) Established the LDAP port to 636.
(upbeat instrumental songs) From the LDAP server typedrop down, decide on generic.
Beside link, clickthe radio button for LDAPS.
During the authentication necessary portion, Examine the “authenticationrequired to look LDAP” box.
(upbeat instrumental songs) Copy the admin DN stringfrom the documentation page and paste it inside the admin DN subject in the heart beat Protected Website interface.
(upbeat instrumental audio) Change the integrationunderscore vital variable using your integration critical.
(upbeat instrumental songs) Then duplicate your secret essential and paste it from the password field.
During the getting person entries area, duplicate the string you employed inthe admin DN part above and paste it in The bottom DN field.
(upbeat instrumental audio) Then copy the filter fromthe documentation page and paste it within the filterfield in the online interface.
(upbeat instrumental music) Click on preserve.
(upbeat instrumental new music) When you simply click conserve, youmight receive a message indicating which the LDAPserver is unreachable.
You can disregard this information.
Now you need to configure a user realm with the Duo LDAP server.
To accomplish this, you cancreate a fresh realm for screening, make a realm to graduallymigrate consumers in the new technique, or utilize the default customers realm.
For this online video, Now we have by now made a Duo buyers group that we'll configure to implement Duo for secondary authentication.
Inside your VPN interface, navigate to buyers, user realms, and click the website link for that person realm you want to insert https://vpngoup.com secondary authentication to.
Underneath the additionalauthentication servers part, pick out the “empower additionalauthentication server” checkbox.
(upbeat instrumental tunes) While in the authentication range two field, pick out Duo-LDAP.
Next to person name is, pick out the radio button for predefined as and enter if It's not presently current.
(upbeat instrumental songs) Beside password is, select the button for specified by user on register web page.
(upbeat instrumental new music) Check the box for “endsession if authentication towards this server fails”.
(upbeat instrumental audio) Click conserve adjustments.
(upbeat instrumental new music) Simply click the authentication plan tab at the highest of your pageand then simply click password.
(upbeat instrumental new music) In the choices for the additional authentication server segment, find “let all customers”.
Click help you save alterations.
(upbeat instrumental audio) To complete putting together your integration, configure a sign up policyfor secondary authentication.
In this example We're going to utilize the default asterisk slash URL plan, but you can put in place a different check in coverage at a customized URL like asteriskslash Duo-screening for tests.
In the highest menu, head to authentication, signing in, sign up procedures.
(upbeat instrumental new music) Click on the website link for your sign up plan you want to modify.
During the sign in web site list, pick out Duo.
(upbeat instrumental music) From the authentication realm area, pick the radio button for “person picks from an index of authentication realms”.
Choose the person realmyou configured before and click include.
Be sure this is the only selected realm for this sign up webpage.
Simply click preserve alterations.
(upbeat instrumental new music) With everything configured, it's now time to check your setup.
With your browser, navigate for the URL that you described on your register coverage.
(upbeat instrumental new music) Once you finish primary authentication, the Duo Prompt seems.
Using this prompt, customers can enroll in Duo or entire two-element authentication.
Due to the fact this person has alreadybeen enrolled in Duo, you are able to decide on deliver me a force, phone me, or enter a passcode.
Decide on “send out me a force” tosend a Duo force notification to the smartphone.
In your phone, open up the notification, faucet the environmentally friendly button toaccept, and you also're logged in.
You have got efficiently established upDuo two-aspect authentication for you Pulse Link Safe VPN.
(upbeat instrumental audio).
Комментировать | « Пред. запись — К дневнику — След. запись » | Страницы: [1] [Новые] |