Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Multifactor on Aruba CPPM with 802.1X service

This thread has been viewed 7 times

  • 1.  Multifactor on Aruba CPPM with 802.1X service

    Posted Sep 07, 2017 10:08 AM

    Hi,

    What is the best approach to setup 2FA to tie up with 802.1X wireless service, 

    For example when users are trying to connect to the internal WiFi they are required to type both their AD password and a pin /  token.

     



  • 2.  RE: Multifactor on Aruba CPPM with 802.1X service

    EMPLOYEE
    Posted Sep 07, 2017 10:09 AM

    What is your MFA solution? 

     



  • 3.  RE: Multifactor on Aruba CPPM with 802.1X service

    Posted Sep 07, 2017 10:27 AM

    We currently don't have any 2FA for the wireless system, the management team for the company I work for now wants me to implement 2FA with the current wireles  system. Hence am exploring which  2FA tool would be the best choice.

     

     



  • 4.  RE: Multifactor on Aruba CPPM with 802.1X service

    EMPLOYEE
    Posted Sep 07, 2017 10:32 AM

    Doing password + PIN at the supplicant level provides a very poor user experience and also requires a custom supplicant in many cases.

     

    We can support a "sandwich flow" with modern MFA providers like Duo and GoVerifyID. Sandwich meaning, the device connects and based on a timer or expiry, the user is redirected to an MFA challenge in their browser.



  • 5.  RE: Multifactor on Aruba CPPM with 802.1X service

    Posted Sep 07, 2017 10:58 AM

    Does it work with Azure multifactor authenticator?



  • 6.  RE: Multifactor on Aruba CPPM with 802.1X service

    EMPLOYEE
    Posted Sep 07, 2017 11:03 AM

    You'd have to use the RADIUS based integration with Azure authenticator which would require the custom supplicant. Azure Authenticator does not currently easily support external integration via their API.



  • 7.  RE: Multifactor on Aruba CPPM with 802.1X service

    Posted Sep 07, 2017 11:24 AM

    Sure I will investigate using DUO. Thanks.



  • 8.  RE: Multifactor on Aruba CPPM with 802.1X service

    EMPLOYEE
    Posted Sep 07, 2017 11:29 AM

    Reach out to your Aruba ClearPass partner. There is a rough how to for Duo.