Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to implement VPN access to our company servers (Windows/ADS). The problem is that we have confidential intellectual property we want to protect, and we are afraid that engineers are not the most creative people for creating hard passwords.

We use a sonicwall firewall.

Is there a way to demand double authentication to have VPN access? I mean, when a certain user tries to log-in via VPN, the VPN server sends an SMS (or via smartphone app - android or iphone) to the user that needs to be entered to gain full VPN access?

share|improve this question

I recently installed duo two factor authentication and have been very happy with it. It can be configured to use a smartphone app with push notifications/otp or sms or phone calls. I set it up across my linux systems but there are integrations for widows and a variety of other devices/applications.

share|improve this answer
Duo Security is awesome +1 – Jacob Apr 5 '13 at 20:37

Something like this?

One-Time Password via SMS authentication to Cisco ASA VPN End-to-End Full Configuration including OTP Server is covered in detail here.

share|improve this answer

There are many solutions that provide two factor authentication and sending the second factor via SMS.

The important question is, which can be integrated into your sonic wall the best. Hopefully your sonicwall is capable of authenticating the user via RADIUS. Most solutions also implement the RADIUS protocol.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.