You will need to upload this to your Juniper SSL VPN. This file is customized for your account and has your Duo account ID appended to the file name (after the version).
Download the appropriate Duo Juniper package zip file for your device's firmware version from the Duo Admin Panel. See Protecting Applications for more information about protecting applications in Duo and additional application options. You'll need this information to complete your setup. Click Protect to the far-right to configure the application and get your integration key, secret key, and API hostname. Log in to the Duo Admin Panel and navigate to Applications.Ĭlick Protect an Application and locate the entry for Juniper SSL VPN in the applications list. You should already have a working primary authentication configuration for your SSL VPN users before you begin to deploy Duo, e.g. Log on to your SA, IVE or MAG administrator interface and verify that your firmware is version 6.x, 7.x, or 8.x (up to 8.2). Make sure that Duo is compatible with your Juniper Networks Secure Access SSL VPN. Get Two-Factor Authentication for Juniper VPN with Duo Security in 5 Minutes First Stepsīefore moving on to the deployment steps, it's a good idea to familiarize yourself with Duo administration concepts and features like options for applications, available methods for enrolling Duo users, and Duo policy settings and how to apply them. If you have updated to Pulse firmware or devices, please see the Pulse Connect Secure SSL VPN instructions. These instructions are for the Juniper-branded SA SSL VPN. This also supports integrating Duo into a single Juniper sign-in URL with multiple authentication realms. The Juniper RADIUS configuration does not feature the interactive Duo Prompt for web-based logins, but that configuration does capture client IP information for use with Duo policies, such as geolocation and authorized networks, and offers configurable fail mode. This integration expressly supports Juniper/Pulse SSL VPN and is not guaranteed to work with any other VPN solution. There is no configurable fail mode for LDAPS connections, so if your device cannot contact Duo's service your users won't be able to log in with Duo. LDAPS authentications do not report a client IP address when the Pulse VPN client is used. Your device makes a direct connection to Duo's cloud service using LDAPS. This Juniper SSL VPN configuration supports inline self-service enrollment and the Duo Prompt for web-based VPN logins, and push, phone call, or passcode authentication for Pulse desktop and mobile client connections that use SSL encryption. 
Was this page helpful? Let us know how we can make it better.
0 kommentar(er)
