Trying to set up employees to work from home sometimes through a remote access vpn (cisco). Happy with the security of the system but not particularly comfortable with the security habits of employees, so want to establish 2-factor authentication, hopefully using a solution that utilizes a wired or wireless phone as the "what you have" factor. Does anyone have experience with solutions like this, and would your recommend one or another?
Which can do the job via mobile phones. One of the problems associated with using SMS as the second factor solution is latency on the mobile networks. Newer technologies get around this by using a Java ME client that's resident on the mobile as the 'what you have' token. The user simply presses a key to respond, and the phone does the rest.
It means that you have to have Java enabled mobiles, but it's a better system, and doesn't incur the extra charges that would be incurred with SMS.
I think the voice channel is the best one. If anything is engineered to be reliable--both cell and wireline--it is voice networks. Some solutions work both on wireline and wireless phones, and allow for adjustment from line to line and even country to country, if needed.
Hi there, good insights all. I've come across PhoneFactor (click here, which uses the voice channel and seems like what I'm looking for for vpn authentication. Anyone have experience with this solution? Looks good but would love some real world feedback.
Hey guys, thanks for the help. I've set up a test system for PhoneFactor, it seems to be doing what I need it to do. There have been some good free versions so that I can learn what I need to on a small scale. We're about ready to roll it out for a vpn security solution.
"Hey guys, thanks for the help. I've set up a test system for PhoneFactor, it seems to be doing what I need it to do. There have been some good free versions so that I can learn what I need to on a small scale. We're about ready to roll it out for a vpn security solution."
Good to hear, I think its way better than Authetisec