Forum Discussion
Harry1
Nimbostratus
NimbostratusWant to understand about pre-requisites and flow for Bigip APM browser based sslvpn with RSA smart card and token
Dear Friends,
I just wanted to understand about ssl vpn(only browser based) with RSA.what could be the flow and pre-requisites in this case? first authentication method would be Active directory...
Yann_Desmarest
Cirrus
CirrusHi,
In terms of pure security, I would recommend to set a login page with 3 fields (username, password, 2-factor) and authenticate first for the RSA token (using RSA native AAA or Radius Auth), then if 2-factor auth is successful, do the AD authentication.
In terms of configuration, you can use the following as an example :
Harry1Nimbostratus
Nimbostratusas per my understanding, we can configure both dual factor as per requirement. i mean either we can enforce first authentication as a secure auth and second would be AD as per customer requirement or vice-versa . please correct if i am wrong.
