VPNGoupCom Herkes çevrimiçi güvenlik ve gizlilik konusunda endişe ve kişisel bilgilerini ve tarama alışkanlıkları ortaya istemiyoruz, VPN harika bir çözüm
(upbeat instrumental audio) – [Instructor] Hi, I'mMatt from Duo Security.
Within this video clip I'm going to demonstrate how to safeguard your PulseConnect Secure SSL VPN with Duo.
You'll want to reference the documentation for this configuration atduo.
com/docs/pulseconnect.
Before beginning the setup approach, make sure that Duo iscompatible using your Pulse VPN.
Log on towards your administrator Website interface and verify that yourfirmware is version 8.
2.
On top of that, you'll want to Possess a useful Key authentication configuration for the SSL VPN people, for example LDAP authenticationto Lively Listing.
(upbeat instrumental songs) Log in for the Duo admin panel.
(upbeat instrumental music) In the left aspect bar, simply click programs.
Click on “Shield anapplication” and kind juniper during the search bar.
Beneath the entry for Juniper SSL VPN, click on defend this software.
Your integration essential, secretkey, and API host name are provided in the topof the Homes page.
You will require these later throughout setup.
Simply click the url to downloadthe Duo Juniper 8.
x offer.
This file is custom-made for your personal account and has your Duo account IDappended into the file name.
Take note that Duo's Juniper configuration is suitable with Pulse Connect Safe and you can change the displayname of the application at The underside of the Houses website page.
For simple reference, changethe name of this application to Pulse Link Protected VPN.
(upbeat instrumental songs) Simply click conserve adjustments.
(upbeat instrumental new music) Now modify the sign up website page.
Log in towards your Pulse Hook up Protected administrator Internet interface.
(upbeat instrumental songs) In the best menu, navigateto authentication, signing in, sign in web pages.
(upbeat instrumental music) Simply click add customized web pages.
(upbeat instrumental new music) Within the identify industry, type Duo.
Set website page sort to Accessibility.
(upbeat instrumental audio) Next to templates file, simply click Browse and select the Duo Juniper zip file you downloaded with the admin panel.
Don't find the “use custom made webpage for Pulse desktop consumer logon” or “prompt the secondary qualifications on the second web page” selections, Should they be present.
Check the skip validationchecks for the duration of upload box.
Click upload personalized internet pages.
Chances are you'll overlook any warnings that appear.
Future incorporate the Duo LDAP server.
Open a different browser window and navigate to duo.
com/docs/pulseconnect.
(upbeat instrumental songs) Scroll down to the “Incorporate theDuo LDAP Server” section with the documentation.
You can find strings you cancopy from this segment to help make setup simpler.
(upbeat instrumental songs) In the top menu of youradministrator interface, navigate to authentication, auth servers.
(upbeat instrumental music) In the auth server typelist, pick out LDAP server.
Simply click new server.
(upbeat instrumental new music) In the name industry, type Duo-LDAP.
During the LDAP server area, enter your API hostname out of your application’s Homes web site within the Duo admin panel.
(upbeat instrumental songs) Set the LDAP port to 636.
(upbeat instrumental songs) Inside the LDAP server typedrop down, choose generic.
Beside connection, clickthe radio button for LDAPS.
From the authentication essential section, Look at the “authenticationrequired https://vpngoup.com to search LDAP” box.
(upbeat instrumental new music) Copy the admin DN stringfrom the documentation web page and paste it from the admin DN industry in the Pulse Protected World-wide-web interface.
(upbeat instrumental new music) Change the integrationunderscore important variable with the integration crucial.
(upbeat instrumental songs) Then duplicate your magic formula vital and paste it within the password field.
Inside the acquiring person entries part, duplicate the string you made use of inthe admin DN portion above and paste it in the base DN industry.
(upbeat instrumental music) Then copy the filter fromthe documentation site and paste it in the filterfield in the world wide web interface.
(upbeat instrumental new music) Simply click help save.
(upbeat instrumental audio) Once you click help save, youmight receive a message indicating that the LDAPserver is unreachable.
You are able to disregard this concept.
Now you might want to configure a person realm for the Duo LDAP server.
To perform this, you cancreate a completely new realm for screening, create a realm to graduallymigrate end users in the new procedure, or make use of the default consumers realm.
For this online video, Now we have already developed a Duo buyers team that we will configure to work with Duo for secondary authentication.
As part of your VPN interface, navigate to people, consumer realms, and click on the url for your person realm you ought to insert secondary authentication to.
Underneath the additionalauthentication servers part, decide on the “empower additionalauthentication server” checkbox.
(upbeat instrumental audio) In the authentication quantity two field, select Duo-LDAP.
Next to person title is, decide on the radio button for predefined as and enter if It isn't now present.
(upbeat instrumental songs) Beside password is, decide on the button for specified by person on sign in page.
(upbeat instrumental audio) Look at the box for “endsession if authentication from this server fails”.
(upbeat instrumental new music) Click preserve modifications.
(upbeat instrumental songs) Click on the authentication coverage tab at the top of your pageand then simply click password.
(upbeat instrumental songs) In the selections for the additional authentication server part, pick out “enable all people”.
Click on preserve variations.
(upbeat instrumental music) To finish creating your integration, configure a check in policyfor secondary authentication.
In this example We are going to use the default asterisk slash URL policy, however you can put in place a brand new check in policy in a tailor made URL like asteriskslash Duo-tests for tests.
In the best menu, check out authentication, signing in, sign in procedures.
(upbeat instrumental tunes) Click on the url for the check in coverage that you might want to modify.
During the register site checklist, pick out Duo.
(upbeat instrumental tunes) From the authentication realm section, decide on the radio button for “user picks from an index of authentication realms”.
Choose the user realmyou configured previously and click add.
Make certain This can be the only picked realm for this sign up web site.
Click on help you save variations.
(upbeat instrumental songs) With every little thing configured, it's now time to check your set up.
With your browser, navigate on the URL that you simply outlined for your personal check in policy.
(upbeat instrumental audio) After you total Key authentication, the Duo Prompt appears.
Working with this prompt, consumers can enroll in Duo or finish two-component authentication.
Considering the fact that this consumer has alreadybeen enrolled in Duo, you are able to pick ship me a force, call me, or enter a passcode.
Decide on “mail me a drive” tosend a Duo drive notification in your smartphone.
On the telephone, open the notification, tap the environmentally friendly button toaccept, and also you're logged in.
You have efficiently established upDuo two-variable authentication for you personally Pulse Join Protected VPN.
(upbeat instrumental tunes).