VPNGoupCom Herkes çevrimiçi güvenlik ve gizlilik konusunda endişe ve kişisel bilgilerini ve tarama alışkanlıkları ortaya istemiyoruz, VPN harika bir çözüm
(upbeat instrumental songs) – [Instructor] Hi, I'mMatt from Duo Security.
On this online video I'm going to demonstrate how to safeguard your PulseConnect Safe SSL VPN with Duo.
You should definitely reference the documentation for this configuration atduo.
com/docs/pulseconnect.
Before starting the set up procedure, Be sure that Duo iscompatible using your Pulse VPN.
Go surfing on your administrator World-wide-web interface and verify that yourfirmware is version eight.
two.
On top of that, you have to Use a purposeful Most important authentication configuration for your SSL VPN end users, such as LDAP authenticationto Energetic Listing.
(upbeat instrumental music) Log in to your Duo admin panel.
(upbeat instrumental songs) From the still left facet bar, click on applications.
Click on “Defend anapplication” and type juniper while in the look for bar.
Underneath the entry for Juniper SSL VPN, click on shield this software.
Your integration crucial, secretkey, and API host title are offered for the topof the Houses webpage.
You will want these later on all through set up.
Simply click the link to downloadthe Duo Juniper 8.
x package.
This file is custom-made for the account and has your Duo account IDappended into the file title.
Note that Duo's Juniper configuration is appropriate with Pulse Connect Protected and you can alter the displayname of the application at The underside from the Qualities site.
For simple reference, changethe identify of this application to Pulse Hook up Secure VPN.
(upbeat instrumental music) Click preserve variations.
(upbeat instrumental music) Now modify the check in webpage.
Log in on your Pulse Join Secure administrator Net interface.
(upbeat instrumental audio) In the top menu, navigateto authentication, signing in, check in pages.
(upbeat instrumental new music) Click add custom web pages.
(upbeat instrumental audio) From the name industry, form Duo.
Set website page form to Accessibility.
(upbeat instrumental songs) Beside templates file, simply click Look through and select the Duo Juniper zip file you downloaded in the admin panel.
Tend not to select the “use customized website page for Pulse desktop customer logon” or “prompt the secondary credentials on the second page” alternatives, Should they be present.
Check the skip validationchecks through add box.
Click on add custom made pages.
It's possible you'll overlook any warnings that seem.
Subsequent incorporate the Duo LDAP server.
Open a completely new browser window and navigate to duo.
com/docs/pulseconnect.
(upbeat instrumental new music) Scroll right down to the “Include theDuo LDAP Server” area from the documentation.
You can find strings you cancopy from this part to make setup less complicated.
(upbeat instrumental new music) In the best menu of youradministrator interface, navigate to authentication, auth servers.
(upbeat instrumental audio) Inside the auth server typelist, choose LDAP server.
Click new server.
(upbeat instrumental tunes) While in the name subject, kind Duo-LDAP.
From the LDAP server field, enter your API hostname from a software’s Homes site during the Duo admin panel.
(upbeat instrumental songs) Established the LDAP port to 636.
(upbeat instrumental songs) While in the LDAP server typedrop down, select generic.
Beside relationship, clickthe radio button for LDAPS.
During the authentication demanded area, Verify the “authenticationrequired to search LDAP” box.
(upbeat instrumental audio) Duplicate the admin DN stringfrom the documentation webpage and paste it within the admin DN discipline in the heart beat Protected World wide web interface.
(upbeat instrumental tunes) Exchange the integrationunderscore essential variable with the integration crucial.
(upbeat instrumental songs) Then duplicate your magic formula essential and paste it inside the password industry.
From the acquiring person entries part, copy the string you utilized inthe admin DN area earlier mentioned and paste it in The bottom DN subject.
(upbeat instrumental songs) Then copy the filter fromthe documentation page and paste it within the filterfield in the online interface.
(upbeat instrumental songs) Click preserve.
(upbeat instrumental new music) Once you simply click preserve, youmight receive a message indicating which the LDAPserver is unreachable.
You are able to disregard this concept.
Now you need to configure a person realm for the Duo LDAP server.
To perform this, you cancreate a brand new realm for screening, develop a realm to graduallymigrate end users in the new process, or use the default buyers realm.
For this online video, we have currently produced a Duo people group that we are going to configure to utilize Duo for secondary authentication.
Within your VPN interface, navigate to end users, person realms, and click the backlink for that user realm you would like to add secondary authentication to.
Beneath the additionalauthentication servers area, find the “allow additionalauthentication server” checkbox.
(upbeat instrumental tunes) Inside the authentication selection two subject, select Duo-LDAP.
Next to person title is, pick out the radio button for predefined as and enter if It's not previously existing.
(upbeat instrumental tunes) Beside password is, choose the button for specified by consumer on register webpage.
(upbeat instrumental new music) Examine the box for “endsession if authentication versus this server fails”.
(upbeat instrumental songs) Click on help you save alterations.
(upbeat instrumental new music) Click on the authentication policy tab at the very best in the pageand then simply click password.
(upbeat instrumental songs) Inside the choices for the additional authentication server part, choose “let all https://vpngoup.com people”.
Click on preserve variations.
(upbeat instrumental tunes) To finish creating your integration, configure a register policyfor secondary authentication.
In this example We're going to utilize the default asterisk slash URL plan, however , you can set up a whole new check in coverage at a tailor made URL like asteriskslash Duo-testing for testing.
In the very best menu, head to authentication, signing in, check in policies.
(upbeat instrumental songs) Click on the hyperlink for that sign up coverage that you'd like to modify.
From the sign up webpage record, find Duo.
(upbeat instrumental audio) Within the authentication realm area, choose the radio button for “person picks from a listing of authentication realms”.
Select the consumer realmyou configured previously and click on insert.
Be certain this is the only picked realm for this sign up web page.
Click on conserve variations.
(upbeat instrumental new music) With anything configured, it's now time to check your setup.
As part of your browser, navigate to the URL which you defined to your sign in policy.
(upbeat instrumental music) Once you comprehensive Most important authentication, the Duo Prompt seems.
Employing this prompt, people can enroll in Duo or comprehensive two-component authentication.
Since this consumer has alreadybeen enrolled in Duo, it is possible to pick out ship me a thrust, simply call me, or enter a passcode.
Decide on “send out me a force” tosend a Duo push notification in your smartphone.
With your cellular phone, open the notification, tap the inexperienced button toaccept, and you also're logged in.
You've got productively set upDuo two-factor authentication for you Pulse Link Safe VPN.
(upbeat instrumental audio).