remote access vpn authentication

[pgershwin]

Hi, I'm trying to strengthen the authentication for my remote access vpn to a 2-factor setup.  I've heard of Phonefactor and a few other solutions that use your phone as the physical token.  Does anyone have experience with these solutions, and could you recommend one (and why)?  thanks in advance!

[henryclancy]

Check out PhoneFactor.  It's a quality solution that is easy to implement and easy to use.

[pgershwin]

Thanks, I downloaded a free version and tried it out.  Seems like a quality solution, though quality is one thing and price is another.  Doesn't say much about cost on-line of course.  Do you happen to have a ballpark?

[henryclancy]

It's generally priced as an Application Service Provider (i.e, don't buy the software, but rent it instead).  There are a lot of free versions, including one for ssl vpn security.  I got some friends who have been using the free version for a long time.

[pgershwin]

Cool.  PhoneFactor seems to be working pretty well for us on a trial basis.  Goal will be to drive it steadily into production uses.  The users seem to be taking to it pretty well.

[henryclancy]

Yes they seem to like PhoneFactor better in our company as well, relative to tokens which they kept losing or kept getting out of synch.

[jaredmalthus]

Sorry to barge in.  SEems like an interesting service.  Is there any provision for real time notification if someone misuses the service?

[henryclancy]

Yes there is, if a user receives a call from PhoneFactor and they aren't trying to access the vpn, they can hit the "*" key instead of the "#" key, which immediately notifies network management of an attempt to access the network.