#DUO SONICWALL GLOBAL VPN HOW TO#
#DUO SONICWALL GLOBAL VPN SOFTWARE DOWNLOAD#
#DUO SONICWALL GLOBAL VPN SOFTWARE#
#DUO SONICWALL GLOBAL VPN WINDOWS#

From the Authentication Server drop-down list, select the authentication server you created.This is the IP address or domain name that Mobile VPN with SSL clients connect to by default. In the General section, for the Primary text box, type the public IP address (External IP address) or domain name of the Firebox.Select the Activate Mobile VPN with SSL check box.In the SSL section, click Manually Configure.Leave the default value for Group Attribute.This key is used to communicate with the Duo Authentication Proxy Server. In the Shared Secret and Confirm Secret text boxes, type a shared secret key.In the Port text box, leave the default port setting of 1812.In the IP Address text box, type the IP address of the Duo Authentication Proxy.In the Primary Server Settings section, select the Enable RADIUS Server check box.You cannot change the domain name after you save the settings. Users must specify this domain name on the user login page. In the Domain Name text box, type the domain name for this RADIUS server.From the Authentication Servers list, select RADIUS.You must configure the RADIUS authentication settings and enable Mobile VPN with SSL on your Firebox. Right-click NPS (Local) and select Register server in Active Directory.The name of this group must match the name of the Active Directory group your users belong to. In the Attribute Information window, type a group name in the text box.From the Attributes list, select Filter-Id.In our example, we use group authentication, if you want to use user authentication, skip Steps 24-30. In the Configure Settings section, click Add.In the Configure Authentication Methods section, select the Unencrypted authentication (PAP, SPAP) check box.

In the Enter the object name to select text box, type the group name.In the Specify Conditions section, click Add.In the Policy Name text box, type a name for this policy.Right-click Network Policies and select New.Select Polices > Connection Request Policies.You must use the same shared secret key when you configure Duo Authentication Proxy for Primary Authentication. This key is used to communicate with the Duo Authentication Proxy. In the Shared secret and Confirm shared secret text boxes, type a shared secret key.In our example, the IP address of the Duo Authentication Proxy is 192.168.4.18. In the Address (IP or DNS) text box, type the IP address of the Duo Authentication Proxy.In the Friendly name text box, type a name.Right-click RADIUS Clients and select New.Select RADIUS Clients and Servers > RADIUS Clients.The Network Policy Server console appears.

#DUO SONICWALL GLOBAL VPN WINDOWS#

On the Windows server, run Server Manager.

#DUO SONICWALL GLOBAL VPN HOW TO#

Configure Microsoft NPS Serverįor instructions on how to configure Active Directory Domain Services, see the Microsoft documentation for Active Directory. In our configuration, the Duo Authentication Proxy and the RADIUS server (Microsoft NPS) are located on the same subnet. The integration uses the RADIUS server for primary user authentication. It communicates with the RADIUS server, the Duo Security service in the cloud, the WatchGuard Firebox, and the Duo mobile app. The Duo Authentication Proxy acts as a bridge. Use the Duo account to log in to the Duo Service to manage applications, enroll users, and get integration keys. To complete this integration, you must have: Duo Mobile Application 4.13.0.21 on iOS.Windows Server 2016 with Microsoft Network Policy Server (NPS) and Active Directory Domain Services.Duo Security Authentication Proxy 5.6.1 on Windows.

#DUO SONICWALL GLOBAL VPN SOFTWARE#

The hardware and software used in this integration include: This diagram shows the test topology for this integration. The Authentication Proxy receives a secondary authentication result from the Duo Security service.Secondary authentication is performed through the Duo Security service.The Authentication Proxy establishes a secure connection to the Duo Security service.The Authentication Proxy completes primary authentication using RADIUS.The Firebox sends an authentication request to Duo’s Authentication Proxy.The user initiates primary authentication to the WatchGuard Firebox.The workflow for two-factor authentication with Duo is shown here:

#DUO SONICWALL GLOBAL VPN SOFTWARE DOWNLOAD#

This document describes the steps to integrate WatchGuard Mobile VPN with SSL client software download access and Mobile VPN with SSL client authentication with Duo Security’s® two-factor authentication solution. Duo Security Authentication Integration Guide Duo Security and Firebox Integration Overview

Duo sonicwall global vpn