About PinSafe OTP for SSLVPN of PA

[ttongfly]

Hi All.

Our customer who want to PinSafe OTP for SSLVPN of PA like a Nordic-Edge.

I found that PA with OTP solution from community that only provided info of Nordic-Edge, RSA Secure-ID.so I want to know or get a guideline of PINSAFE OTP solution to use SSLVPN of PA.
I noticed the Nordic-Edge OTP solution that check a user-id, password and OTP string. Customer want to 2 times user validation check like a Nordic-Edge SSLVPN solution.(http://nordicedge.se/palo-alto)

Please give me a info for PinSafe OTP solution if you are having some info about this.

Thanks.

Regards.

Roh.

[gsamuels]

Hi

We currently do not have any additional documentation on this solution.

[bobby549049 · Accepted solution]

Hi,

PAN SSL VPN supports RADIUS Authentication and pinsafe OTP can be configed as RADIUS Server.

I also find a document about pinsafe OTP integrated with ASA in the url below.

http://kb.swivelsecure.com/wiki/index.php/Cisco_ASA_Integration#Configuring_the_RADIUS_server

(5 PINsafe Configuration)

Also, there should be 16 characters limitation on PAN.

[ttongfly]

Hi guys.

I experienced PAN SSLVPN with Pinsafe OTP that support PaloAlto SSLVPN.

PAN SSLVPN configured authentication profile using radius protocol to communicate Pinsafe OTP.

NordicEdge OTP could support 2 factor authentication. When user try to connect SSLVPN of PAN, SSL VPN portal asked AD login id and password authentication and then asked OTP passcode authentication.

PinSafe OTP also could support above function, 2 factor authentication,  and I was done successfully integrated PAN SSLVPN.

Thanks.

Regards.

Roh.