2-factor authentication for windows remote access vpn

[pgershwin]

Hi, I'm looking for a good 2-factor authentication solution for my windows vpn.  I've heard about phone-based solutions.  Does anyone have any suggestions?

[henryclancy]

Phone-based solutions seem to be coming of age, mainly because it is becoming true that everyone has a phone in their pocket, or even sit at a desk where there is a phone available.

[pgershwin]

Well what's the beef with them?  How do they work?  What is the benefit?

[pgershwin]

Well what's the beef with them?  How do they work?  What is the benefit?

[henryclancy]

The experience is that a user tries to log into their ssl vpn but for added security, the system calls them back on their cellphone and the user types in a "#".  It is widely percieved as a good experience by users.  Big benefit is that IT does not have to manage remote hardware, and users are more likely to respect their own cell-phones than a corporate-issued thinga mabob.

[pgershwin]

Are these solutions well-established in the market?  I haven't really heard of it before

[henryclancy]

You might want to check out PhoneFactor at www.phonefactor.com/solutions/remote-access-vpns.  They aren't the only player but they are a leading player.  Plus they have a pretty solid reputation for service and for enabling you to get started inexpensively.

[jaredmalthus]

Yep, we've tried PhoneFactor for 2-factor authentication on our cisco vpn.  I sleep a lot better at night, especially given the permissive behavior of our users.

[henryclancy]

I like the fact that 2-factor takes some responsibility out of the hands of users who unfortunately don't care enough about security, and gathers it into the hands of professionals.  Almost like having a security guard at your house.