Rublon

Secure Remote Access

By

Last updated on May 16, 2024

Overview of 2FA for SonicWall VPN

Two-Factor Authentication (2FA) for SonicWall VPN is an extra layer of security that requires users to provide two authentication factors to gain access to resources. The first factor requires users to enter their Active Directory / RADIUS username and password. After the first factor has been completed, the user then undergoes secondary authentication using one of the available authentication methods (Mobile Push, Email Link, etc.). Upon successful completion of both factors, the user is granted access to the resource. Enabling 2FA for SonicWall VPN adds an additional layer of protection by preventing hackers from gaining access to resources even if they stole the user’s login credentials.

Rublon introduces Two-Factor Authentication in a number of ways. Various SonicWall products are supported. Read further to find out more about supported products and Authentication Methods.

Demo Video of 2FA for SonicWall VPN

Before you start

Before moving on, ensure you already have a properly configured primary authentication configuration for your SonicWall product.

Configuration of 2FA for SonicWall VPN

Depending on your requirements and the SonicWall product you would like to integrate with Rublon, you will have to use either Rublon Authentication Proxy or Rublon Access Gateway. Both solutions have their advantages. Refer to the documentation of specific SonicWall products to find out which means of integration are supported.

Both Rublon Authentication Proxy and Rublon Access Gateway support RADIUS and LDAP (OpenLDAP, Microsoft Active Directory) authentication sources.

Rublon Authentication Proxy supports the following Authentication Methods: Email Link, Mobile Push, Passcode.

Rublon Access Gateway supports all Authentication Methods.

MFA for SonicWall SSL VPN

Integrate your SonicWall SSL VPN with Rublon to introduce Two-Factor Authentication (2FA) to your VPN logins. You have to install and configure Rublon Authentication Proxy before configuring Rublon 2FA for SonicWall SSL VPN.

Known limitations:

  • The Mobile Connect desktop client does not support SAML and therefore it can be only used with the Rublon Authentication Proxy, which enables integrations via RADIUS.

The following document describes the configuration of SonicWall SSL VPN, version 9. Rublon has been tested on the NSv series. According to the specifics of SonicWall appliances, Rublon also supports TZ, NSa, NSsp series.

How to enable MFA for SonicWall SSL VPN

MFA for SonicWall WAN GroupVPN

Integrate your SonicWall WAN GroupVPN with Rublon to introduce Two-Factor Authentication (2FA) to your VPN logins. You have to install and configure Rublon Authentication Proxy before configuring Rublon 2FA for SonicWall WAN GroupVPN.

Known limitations:

  • The Mobile Connect desktop client does not support SAML and therefore it can be only used with the Rublon Authentication Proxy, which enables integrations via RADIUS.

The following document describes the configuration of SonicWall WAN GroupVPN VPN, version 9. Rublon has been tested on the NSv series. According to the specifics of SonicWall appliances, Rublon also supports TZ, NSa, NSsp series.

How to enable MFA for SonicWall WAN GroupVPN

MFA for SonicWall SMA

You can integrate your SonicWall SMA with Rublon to introduce Two-Factor Authentication (2FA) to your logins. You can use Rublon Authentication Proxy or Rublon Access Gateway to achieve this.

Both Rublon Authentication Proxy and Rublon Access Gateway can be used for both RADIUS (e.g. FreeRADIUS) and LDAP (e.g. FreeIPA, OpenLDAP, Microsoft Active Directory) authentication sources.

We recommend using Rublon Access Gateway to gain access to all Authentication Methods and get the full experience of Rublon.

We recommend using your web browser to log in to your VPN to gain full support of all Rublon features. Desktop clients are known to have limitations, which prevents them from being fully supported by Rublon 2FA solutions.

Known limitations:

  • The Connect Tunnel desktop client does not support Active Directory, RADIUS or SAML, and therefore cannot be used for Rublon 2FA.
  • The Mobile Connect desktop client does not support SAML and therefore it can only be used with Rublon Authentication Proxy, which enables integrations via RADIUS.

The following documents describe the configuration of SonicWall SMA 8200v, which corresponds to v12.1 onwards.

SonicWall SMA using RADIUS

Integrate SonicWall SMA with Rublon to introduce Two-Factor Authentication (2FA) to your logins. You have to install and configure Rublon Authentication Proxy before configuring Rublon 2FA for SonicWall SMA using RADIUS.

How to enable MFA for SonicWall SMA 8200v – RADIUS

SonicWall SMA using SAML

Integrate SonicWall SMA with Rublon to introduce Two-Factor Authentication (2FA) to your logins. You have to install and configure Rublon Access Gateway before configuring Rublon 2FA for SonicWall SMA using SAML.

How to enable MFA for SonicWall SMA 8200v – SAML

Troubleshooting

If you encounter any issues with your Rublon integration, please contact Rublon Support.

Related Posts