VPNGoupCom Herkes çevrimiçi güvenlik ve gizlilik konusunda endişe ve kişisel bilgilerini ve tarama alışkanlıkları ortaya istemiyoruz, VPN harika bir çözüm
(upbeat instrumental tunes) – [Instructor] Hi, I'mMatt from Duo Protection.
In this movie I'll show you how to safeguard your PulseConnect Safe SSL VPN with Duo.
Be sure to reference the documentation for this configuration atduo.
com/docs/pulseconnect.
Before beginning the setup process, Ensure that Duo iscompatible along with your Pulse VPN.
Log on on your administrator World wide web interface and confirm that yourfirmware is Model 8.
2.
Additionally, you should Use a practical Major authentication configuration for your personal SSL VPN customers, which include LDAP authenticationto Energetic directory.
(upbeat instrumental audio) Log in on the Duo admin panel.
(upbeat instrumental new music) During the left side bar, click purposes.
Click on “Protect anapplication” and kind juniper from the research bar.
Underneath the entry for Juniper SSL VPN, click on guard this application.
Your integration key, secretkey, and API host identify are presented with the topof the Houses web page.
You'll need these afterwards throughout setup.
Click on the website link to downloadthe Duo Juniper 8.
x package deal.
This file is custom-made in your account and it has your Duo account IDappended to your file title.
Be aware that Duo's Juniper configuration is suitable with Pulse Connect Safe and you may change the displayname of this application at the bottom in the Attributes web site.
For straightforward reference, changethe identify of this application to Pulse Connect Protected VPN.
(upbeat instrumental audio) Simply click conserve improvements.
(upbeat instrumental music) Now modify the sign up site.
Log in to the Pulse Hook up Secure administrator Website interface.
(upbeat instrumental audio) In the top menu, navigateto authentication, signing in, sign up pages.
(upbeat instrumental new music) Click on add custom webpages.
(upbeat instrumental music) Within the title industry, type Duo.
Set web page sort to Entry.
(upbeat instrumental audio) Beside templates file, simply click Search and choose the Duo Juniper zip file you downloaded from the admin panel.
Never pick the “use custom made webpage for Pulse desktop client logon” or “prompt the secondary qualifications on the 2nd web site” solutions, If they're existing.
Verify the skip validationchecks during add box.
Simply click upload custom made webpages.
Chances are you'll overlook any warnings that seem.
Next include the Duo LDAP server.
Open up a different browser window and navigate to duo.
com/docs/pulseconnect.
(upbeat instrumental audio) Scroll right down to the “Increase theDuo LDAP Server” section in the documentation.
There are actually strings you cancopy from this section to create set up easier.
(upbeat instrumental tunes) In the best menu of youradministrator interface, navigate to authentication, auth servers.
(upbeat instrumental audio) From the auth server typelist, pick LDAP server.
Click new server.
(upbeat instrumental songs) From the title area, type Duo-LDAP.
Within the LDAP server discipline, enter your API hostname from a application’s Qualities site while in the Duo admin panel.
(upbeat instrumental music) Established the LDAP port to 636.
(upbeat instrumental tunes) In the LDAP server typedrop down, find generic.
Beside relationship, clickthe radio button for LDAPS.
Inside the authentication demanded portion, Examine the “authenticationrequired to look LDAP” box.
(upbeat instrumental tunes) Copy the admin DN stringfrom the documentation web page and paste it from the admin DN field in the heartbeat Secure Net interface.
(upbeat instrumental songs) Exchange the integrationunderscore key variable together with your integration critical.
(upbeat instrumental songs) Then duplicate your magic formula vital and paste it during the password industry.
In the discovering consumer entries section, copy the string you utilized inthe admin DN area above and paste it in The bottom DN field.
(upbeat instrumental new music) Then copy the filter fromthe documentation webpage and paste it inside the filterfield in the web interface.
(upbeat instrumental audio) Click save.
(upbeat instrumental tunes) When you simply click conserve, youmight receive a message indicating the https://vpngoup.com LDAPserver is unreachable.
You may disregard this concept.
Now you should configure a consumer realm for your Duo LDAP server.
To perform this, you cancreate a whole new realm for tests, create a realm to graduallymigrate customers in the new method, or use the default customers realm.
For this movie, We now have presently developed a Duo consumers group that we will configure to work with Duo for secondary authentication.
In the VPN interface, navigate to end users, person realms, and click on the hyperlink for your user realm you ought to increase secondary authentication to.
Under the additionalauthentication servers section, pick the “allow additionalauthentication server” checkbox.
(upbeat instrumental new music) In the authentication amount two discipline, decide on Duo-LDAP.
Close to consumer title is, select the radio button for predefined as and enter if It is far from currently existing.
(upbeat instrumental new music) Next to password is, choose the button for specified by consumer on sign up site.
(upbeat instrumental new music) Examine the box for “endsession if authentication against this server fails”.
(upbeat instrumental audio) Simply click help you save improvements.
(upbeat instrumental songs) Click the authentication plan tab at the top from the pageand then click password.
(upbeat instrumental songs) While in the selections for the extra authentication server area, find “allow all buyers”.
Simply click help you save modifications.
(upbeat instrumental tunes) To complete organising your integration, configure a check in policyfor secondary authentication.
In this example we will utilize the default asterisk slash URL coverage, but you can create a new sign in policy at a customized URL like asteriskslash Duo-screening for tests.
In the top menu, go to authentication, signing in, check in guidelines.
(upbeat instrumental new music) Simply click the connection for your sign in coverage you want to change.
From the sign up page listing, find Duo.
(upbeat instrumental tunes) Within the authentication realm segment, select the radio button for “person picks from a list of authentication realms”.
Pick the consumer realmyou configured earlier and click on add.
Be sure This can be the only chosen realm for this register web page.
Click help save improvements.
(upbeat instrumental songs) With all the things configured, it is currently time to check your set up.
Inside your browser, navigate for the URL you defined for your personal register coverage.
(upbeat instrumental music) Once you full Major authentication, the Duo Prompt seems.
Making use of this prompt, people can enroll in Duo or total two-factor authentication.
Considering that this person has alreadybeen enrolled in Duo, it is possible to choose mail me a thrust, get in touch with me, or enter a passcode.
Select “ship me a drive” tosend a Duo press notification towards your smartphone.
In your telephone, open up the notification, faucet the inexperienced button toaccept, therefore you're logged in.
You may have productively set upDuo two-component authentication in your case Pulse Hook up Secure VPN.
(upbeat instrumental music).