topic Re: About PinSafe OTP for SSLVPN of PA in General Topics

About PinSafe OTP for SSLVPN of PA

ttongfly — Fri, 25 Mar 2011 08:27:02 GMT

Hi All.

Our customer who want to PinSafe OTP for SSLVPN of PA like a Nordic-Edge.

I found that PA with OTP solution from community that only provided info of Nordic-Edge, RSA Secure-ID.so I want to know or get a guideline of PINSAFE OTP solution to use SSLVPN of PA.
I noticed the Nordic-Edge OTP solution that check a user-id, password and OTP string. Customer want to 2 times user validation check like a Nordic-Edge SSLVPN solution.(http://nordicedge.se/palo-alto)

Please give me a info for PinSafe OTP solution if you are having some info about this.

Thanks.

Regards.

Roh.

Re: About PinSafe OTP for SSLVPN of PA

gsamuels — Sat, 26 Mar 2011 03:19:00 GMT

We currently do not have any additional documentation on this solution.

Re: About PinSafe OTP for SSLVPN of PA

bobby549049 — Sat, 23 Apr 2011 14:18:00 GMT

Hi,

PAN SSL VPN supports RADIUS Authentication and pinsafe OTP can be configed as RADIUS Server.

I also find a document about pinsafe OTP integrated with ASA in the url below.

http://kb.swivelsecure.com/wiki/index.php/Cisco_ASA_Integration#Configuring_the_RADIUS_server

(5 PINsafe Configuration)

Also, there should be 16 characters limitation on PAN.

Re: About PinSafe OTP for SSLVPN of PA

ttongfly — Mon, 26 Mar 2012 14:48:49 GMT

Hi guys.

I experienced PAN SSLVPN with Pinsafe OTP that support PaloAlto SSLVPN.

PAN SSLVPN configured authentication profile using radius protocol to communicate Pinsafe OTP.

NordicEdge OTP could support 2 factor authentication. When user try to connect SSLVPN of PAN, SSL VPN portal asked AD login id and password authentication and then asked OTP passcode authentication.

PinSafe OTP also could support above function, 2 factor authentication, and I was done successfully integrated PAN SSLVPN.

Thanks.

Regards.

Roh.