6
Securing your Juniper SSL VPN with two-factor authentication.

Securing Your Juniper SSL VPN with Duo Security · 5 Easy Steps to Integrating Juniper VPN with Duo Security’s Two-Factor STEP 1 Sign up for a Duo Security two-factor account and

  • Upload
    vuliem

  • View
    227

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Securing Your Juniper SSL VPN with Duo Security · 5 Easy Steps to Integrating Juniper VPN with Duo Security’s Two-Factor STEP 1 Sign up for a Duo Security two-factor account and

Securing your Juniper SSL VPN with two-factor authentication.

Page 2: Securing Your Juniper SSL VPN with Duo Security · 5 Easy Steps to Integrating Juniper VPN with Duo Security’s Two-Factor STEP 1 Sign up for a Duo Security two-factor account and

Protecting Your VPNs With Two-Factor Authentication Two-factor authentication provides a second layer of security to VPN credentials by requiring a second form of authentication to verify a user’s identity with something they own (either mobile phones, push notifications, callback or tokens).

Benefits of a Modern Two-Factor Solution A modern two-factor authentication solution provides a seamless user and administrative experience:

‣ No software required. Cloud-enabled two-factor solutions eliminate the need for on-site hardware and software. With Duo Security’s drop-in integration package, you can protect your users in less than 15 minutes.

‣ Easy Deployment. With Duo Security’s self-enrollment feature, users can sign up and choose their preferred authentication method with no training necessary, saving administrators time and significantly reducing help desk costs.

‣ Test before you buy. We allow you to try before you buy without impacting your production users, so you can test-drive our solution from a user and administrative perspective.

Secure Your Juniper SSL VPN Products Providing secure remote access to your company’s networks, a Juniper SSL VPN allows you to securely transfer private data online. These include:

‣Juniper SA Series SSL VPN: SA2500, SA4500, SA6500

‣Juniper MAG Series Junos Pulse Gateways: MAG2600, MAG4610, MAG4611, MAG6610, MAG6611

‣Juniper IVE OS SSL VPN

For more information, please contact [email protected] or 1 (866) 760-4247 © 2014 Duo Security, Inc.

Page 3: Securing Your Juniper SSL VPN with Duo Security · 5 Easy Steps to Integrating Juniper VPN with Duo Security’s Two-Factor STEP 1 Sign up for a Duo Security two-factor account and

5 Easy Steps to Integrating Juniper VPN with Duo Security’s Two-Factor

STEP 1 Sign up for a Duo Security two-factor account and log into your Duo Admin Interface.

Create a new VPN integration with Duo, login, then configure your connection.

STEP 2 Upload your custom package, and create a new authentication server.

For more information, please contact [email protected] or 1 (866) 760-4247 © 2014 Duo Security, Inc.

Page 4: Securing Your Juniper SSL VPN with Duo Security · 5 Easy Steps to Integrating Juniper VPN with Duo Security’s Two-Factor STEP 1 Sign up for a Duo Security two-factor account and

STEP 3 Set up authentication for the LDAP server, including the secret key.

STEP 4 Set up the authentication realm and password policy.

For more information, please contact [email protected] or 1 (866) 760-4247 © 2014 Duo Security, Inc.

Page 5: Securing Your Juniper SSL VPN with Duo Security · 5 Easy Steps to Integrating Juniper VPN with Duo Security’s Two-Factor STEP 1 Sign up for a Duo Security two-factor account and

Enter… in order to...

Passcode Log in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator.

Push Push a login request to your phone (if you have Duo Mobile installed and activated on your iPhone, Android, or BlackBerry device). Just review the request and tap "Approve" to log in.

Phone Authenticate via phone callback.

SMS Get a new batch of SMS passcodes. Your login attempt will fail — log in again with one of your new passcodes.

STEP 5 Finally, configure your Sign-In Policy to complete your integration. Then, test it out by logging in!

Logging in with Junos Pulse ClientsDuo Security also supports logging in with Juniper Junos Pulse clients, see the secondary password commands below for choosing the 2nd factor you want to authenticate with.

For more information, please contact [email protected] or 1 (866) 760-4247 © 2014 Duo Security, Inc.

Page 6: Securing Your Juniper SSL VPN with Duo Security · 5 Easy Steps to Integrating Juniper VPN with Duo Security’s Two-Factor STEP 1 Sign up for a Duo Security two-factor account and

A Two-Factor Success Story Yelp is one of the most widely-used resources for online business reviews.

They chose Duo over competitors due to higher confidence in our security solution, and lower total cost of ownership.

Yelp successfully deployed Duo Security’s two-factor authentication to protect their Juniper VPNs and SSH, with 95 percent of their users using Duo Push.

Duo Push is our secure mobile authentication method that allows you to authenticate with one tap of a button.

Find out more in our Yelp Success Story: http://duo.sc/casestudy-yelp

More Resources Juniper/Duo DocumentationReview our step-by-step integration instructions with screenshots, alternate integrations, FAQ and more - https://www.duosecurity.com/docs/juniper

Juniper/Duo Integration VideoAn easy, 5-min detailed integration walkthrough video showing you how to set up two-factor with Juniper - https://www.duosecurity.com/docs/juniper

Create Your Free Account Today: http://duo.sc/partner-juniper

“We were incredibly blown away at how our deployment went...this was the easiest deployment we’ve ever done. I’m really impressed.”

- Ivan LeichtlingSecurity Manager, Yelp

Duo Securitywww.duosecurity.com617 Detroit St.Ann Arbor, MI 48104+1 (734) 330-26731-866-760-4247

Have questions or want to learn more/get a demo walkthrough? Contact one of our Duo representatives today!

Contact sales:http://duo.sc/contactduo

For more information, please contact [email protected] or 1 (866) 760-4247 © 2014 Duo Security, Inc.