VPNGoupCom Herkes çevrimiçi güvenlik ve gizlilik konusunda endişe ve kişisel bilgilerini ve tarama alışkanlıkları ortaya istemiyoruz, VPN harika bir çözüm
(upbeat instrumental audio) – [Teacher] Hello, I'mMatt from Duo Safety.
In this movie I will show you how to protect your PulseConnect Protected SSL VPN with Duo.
Be sure you reference the documentation for this configuration atduo.
com/docs/pulseconnect.
Before beginning the setup course of action, Make certain that Duo iscompatible with the Pulse VPN.
Go surfing on your administrator World wide web interface and confirm that yourfirmware is Edition 8.
two.
In addition, you have to Use a practical Main authentication configuration in your SSL VPN end users, including LDAP authenticationto active directory.
(upbeat instrumental songs) Log in to the Duo admin panel.
(upbeat instrumental audio) During the left side bar, simply click purposes.
Simply click “Safeguard anapplication” and kind juniper during the lookup bar.
Under the entry for Juniper SSL VPN, simply click safeguard this application.
Your integration crucial, secretkey, and API host title are furnished on the topof the Attributes webpage.
You may need these later on all through setup.
Click the website link to downloadthe Duo Juniper 8.
x deal.
This file is personalized to your account and has your Duo account IDappended to the file title.
Note that Duo's Juniper configuration is appropriate with Pulse Hook up Protected and you'll alter the displayname of this software at the bottom from the properties website page.
For simple reference, changethe identify of this application to Pulse Join Safe VPN.
(upbeat instrumental new music) Click on help save alterations.
(upbeat instrumental audio) Now https://vpngoup.com modify the sign in web site.
Log in on your Pulse Hook up Safe administrator World-wide-web interface.
(upbeat instrumental audio) In the highest menu, navigateto authentication, signing in, sign in pages.
(upbeat instrumental songs) Click add tailor made internet pages.
(upbeat instrumental music) During the title subject, form Duo.
Set web site form to Obtain.
(upbeat instrumental audio) Next to templates file, click on Search and choose the Duo Juniper zip file you downloaded in the admin panel.
Will not find the “use custom made webpage for Pulse desktop customer logon” or “prompt the secondary qualifications on the 2nd web site” solutions, Should they be current.
Test the skip validationchecks all through upload box.
Click add personalized pages.
You may dismiss any warnings that appear.
Future increase the Duo LDAP server.
Open up a fresh browser window and navigate to duo.
com/docs/pulseconnect.
(upbeat instrumental music) Scroll down to the “Insert theDuo LDAP Server” section in the documentation.
You will find strings you cancopy from this section for making set up less difficult.
(upbeat instrumental songs) In the highest menu of youradministrator interface, navigate to authentication, auth servers.
(upbeat instrumental songs) Inside the auth server typelist, find LDAP server.
Click new server.
(upbeat instrumental new music) While in the identify area, sort Duo-LDAP.
During the LDAP server area, enter your API hostname from a software’s Qualities webpage inside the Duo admin panel.
(upbeat instrumental songs) Set the LDAP port to 636.
(upbeat instrumental new music) During the LDAP server typedrop down, pick out generic.
Beside link, clickthe radio button for LDAPS.
From the authentication needed portion, Examine the “authenticationrequired to look LDAP” box.
(upbeat instrumental songs) Duplicate the admin DN stringfrom the documentation web site and paste it in the admin DN subject in the Pulse Safe Website interface.
(upbeat instrumental music) Exchange the integrationunderscore key variable together with your integration key.
(upbeat instrumental audio) Then duplicate your magic formula critical and paste it during the password area.
In the getting person entries area, duplicate the string you employed inthe admin DN segment higher than and paste it in the base DN industry.
(upbeat instrumental songs) Then duplicate the filter fromthe documentation page and paste it in the filterfield in the net interface.
(upbeat instrumental new music) Click on help you save.
(upbeat instrumental songs) After you simply click help you save, youmight receive a message indicating which the LDAPserver is unreachable.
You can disregard this concept.
Now you might want to configure a user realm for the Duo LDAP server.
To accomplish this, you cancreate a completely new realm for testing, produce a realm to graduallymigrate consumers in The brand new technique, or make use of the default users realm.
For this movie, We've got already produced a Duo buyers team that we'll configure to use Duo for secondary authentication.
In your VPN interface, navigate to buyers, consumer realms, and click the hyperlink to the person realm you wish to include secondary authentication to.
Beneath the additionalauthentication servers area, pick out the “help additionalauthentication server” checkbox.
(upbeat instrumental tunes) Inside the authentication selection two field, find Duo-LDAP.
Next to consumer title is, pick out the radio button for predefined as and enter if It's not presently present.
(upbeat instrumental new music) Beside password is, pick out the button for specified by person on check in website page.
(upbeat instrumental audio) Check the box for “endsession if authentication against this server fails”.
(upbeat instrumental audio) Simply click preserve improvements.
(upbeat instrumental new music) Click on the authentication coverage tab at the best of the pageand then click on password.
(upbeat instrumental music) From the options for the extra authentication server portion, select “allow all buyers”.
Click on save adjustments.
(upbeat instrumental songs) To finish establishing your integration, configure a sign in policyfor secondary authentication.
In this example We are going to use the default asterisk slash URL plan, however, you can build a new check in plan at a custom made URL like asteriskslash Duo-screening for screening.
In the best menu, check out authentication, signing in, sign in procedures.
(upbeat instrumental tunes) Click the hyperlink for your check in plan that you might want to change.
Inside the check in web site record, decide on Duo.
(upbeat instrumental songs) While in the authentication realm segment, decide on the radio button for “consumer picks from an index of authentication realms”.
Select the user realmyou configured previously and click on add.
Make sure This can be the only chosen realm for this register site.
Simply click help you save variations.
(upbeat instrumental music) With anything configured, now it is time to test your set up.
In the browser, navigate into the URL you defined for the register policy.
(upbeat instrumental music) When you total Most important authentication, the Duo Prompt seems.
Using this prompt, people can enroll in Duo or comprehensive two-component authentication.
Due to the fact this consumer has alreadybeen enrolled in Duo, you are able to pick deliver me a drive, connect with me, or enter a passcode.
Pick “deliver me a force” tosend a Duo thrust notification to the smartphone.
On your cell phone, open up the notification, faucet the green button toaccept, and you also're logged in.
You might have productively set upDuo two-factor authentication for yourself Pulse Connect Safe VPN.
(upbeat instrumental new music).