asa 5520 + win 2008 radius + RSA token

thorstenn · ‎03-25-2010

hi,

have a win2008 radius server with my ASA and its working fine. Know i want a RSA token solution for clientless SSL VPN. Which tokens the asa supports and is there anywhere a guide how to implement this?

end scenario:

Clientless SSL VPN, Anyconnect login, VPN Client login:

Username: <ldap, working fine at the moment>

Password:<ldap, working fine at the moment>

PIN:<rsa>

Is this possible?

thanks and regards

jon.stern · ‎07-01-2010

I dont have an answer but I

am doing the same setup with ASA 5520 and win 2008 radius. I'm not that familiar wi

th win2008 Radius but can you share the settings you used for Radius like what Authentication methods you use.

Also Im wondering what advantage there is to using Radius over just AD or LDAP authentication?

Thanks

Jorge Salas · ‎07-02-2010

You should permit the MS server to acts as proxy for the RSA request.

Please check this document:

http://www.rsa.com/rsasecured/guides/imp_pdfs/Microsoft_IAS2003_AuthMan61.pdf