I would like to implement VPN access to our company servers (Windows/ADS). The problem is that we have confidential intellectual property we want to protect, and we are afraid that engineers are not the most creative people for creating hard passwords.
We use a sonicwall firewall.
Is there a way to demand double authentication to have VPN access? I mean, when a certain user tries to log-in via VPN, the VPN server sends an SMS (or via smartphone app - android or iphone) to the user that needs to be entered to gain full VPN access?