VASCO Digipass, Juniper SSL VPN configuration guide - Orbit One

More documents

Recommendations

Info

Contents1. Introduction _______________________________________________________________ 41.1. About the solution ____________________________________________________ 41.2. Requirements ________________________________________________________ 51.3. Windows Server 2008 Active Directory ____________________________________ 61.4. Some terminology (important!) __________________________________________ 62. Digipass deployment strategy _________________________________________________ 72.1. Choose an Authentication method _______________________________________ 72.2. Understanding Assignment modes _______________________________________ 72.3. Transition (grace) period _______________________________________________ 82.3.1. Convincing users _____________________________________________ 82.4. Always use Digipass? ___________________________________________________ 93. Prepare Windows server _____________________________________________________ 103.1. Server requirements ___________________________________________________ 103.2. Extend the Active Directory Schema ______________________________________ 103.3. Configure Enterprise Root CA ____________________________________________ 103.4. System Clock _________________________________________________________ 114. VACMAN Middleware________________________________________________________ 124.1. Install Middleware ____________________________________________________ 124.2. Configure the Authentication Server ______________________________________ 125. Import and assign Digipass tokens ______________________________________________ 145.1. Import Digipass records ________________________________________________ 145.2. Moving Digipass to other OU ____________________________________________ 165.3. Manual assign Digipass to User __________________________________________ 165.4. Prepare Digipass for Self-Assignment _____________________________________ 175.4.1. Moving users and Digipass in Active Directory ______________________ 175.5. Test the Digipass ______________________________________________________ 186. Configure Policies ___________________________________________________________ 196.1. Understanding the topology _____________________________________________ 196.1.1. Firewall ports ________________________________________________ 196.2. Open the Digipass Administration MMC ___________________________________ 196.3. Create your Policy _____________________________________________________ 206.4. Configure the Policy assigned to the Authentication Server ____________________ 236.5. Configure the RADIUS Client _____________________________________________ 24Orbit One InternalVASCO Digipass - Configuration with Juniper SA - 4 October 2008 2
6.6. Reset the Digipass Windows Service ______________________________________ 246.7. Test using Radius Client Simulator ________________________________________ 256.7.1. Self-Assignment ______________________________________________ 256.7.2. Normal authentication (without PIN code) ________________________ 266.8. Troubleshouting / Audit ________________________________________________ 277. Configure Juniper SA ________________________________________________________ 287.1. Set the Authentication Servers ___________________________________________ 287.1.1. Active Directory Authentication Server ___________________________ 287.1.2. Digipass Authentication Server __________________________________ 297.2. Set the User Realms ___________________________________________________ 307.2.1. Digipass+Active Directory Realm ________________________________ 307.2.2. Active Directory Only Realm ____________________________________ 317.3. Configure your Sign-In Pages ____________________________________________ 327.3.1. Create Digipass Sign-In Page ____________________________________ 327.3.2. Create No Digipass Sign-In Page _________________________________ 347.4. Set Sign-In Policies ____________________________________________________ 357.4.1. Create “*/nodigipass/” Policy ___________________________________ 357.4.2. Configure “*/” Policy __________________________________________ 367.5. Test Juniper SA Authentication __________________________________________ 37Orbit One InternalVASCO Digipass - Configuration with Juniper SA - 4 October 2008 3
Page 1: VASCO DigipassConfiguration with Ju
Page 5 and 6: 1.2. Requirements• One or more
Page 7: 2. Digipass deployment strategy2.1.
Page 10 and 11: 3. Prepare Windows serverFollow the
Page 12 and 13: 4. VACMAN MiddlewareFollow the step
Page 14 and 15: 5. Import and assign Digipass token
Page 16 and 17: 5.2. Moving Digipass to other OUWhe
Page 18 and 19: 5.5. Test the Digipass• Open the
Page 20 and 21: 6.3. Create your Policy• Click on
Page 22 and 23: ••• OKOrbit One InternalVASCO
Page 24 and 25: 6.5. Configure the RADIUS ClientA R
Page 26: 6.7.2. Normal authentication (witho
Page 29 and 30: 7.1.2. Digipass Authentication Serv
Page 31 and 32: Set Role Mapping for this Realm•
Page 33 and 34: Copy paste this code in Instruction
Page 35 and 36: 7.4. Set Sign-In Policies7.4.1. Cre
Page 37: 7.5. Test Juniper SA Authentication

VASCO Digipass, Juniper SSL VPN configuration guide - Orbit One

Create successful ePaper yourself

Delete template?

Save as template?