IPsec VPN XAuth

Extended Authentication (XAuth) increases security by requiring user authentication in addition to the preshared key.

When creating an IPsec VPN using the wizard (VPN > IPsec > Wizard), select the SecurID User Group on the Authentication page. Members of the SecurID group are required to enter their SecureID code to authenticate. For more on XAuth, see Configuring XAuth authentication on page 511

PPTP VPN

PPTP VPN is configured in the CLI. In the PPTP configuration (config vpn pptp), set usrgrp to the SecurID user group.

SSL VPN

You need to map the SecurID user group to the portal that will serve SecurID users and include the SecurID user group in the Source User(s) field in the security policy.

To map the SecurID group to an SSL VPN portal:

1. Go to VPN > SSL > Settings.

2. In Authentication/Portal Mapping, select Create New.

3. Enter

Users/Groups                            securIDgrp

Portal                                          Choose the portal.

4. Select OK.