VPNGoupCom Herkes çevrimiçi güvenlik ve gizlilik konusunda endişe ve kişisel bilgilerini ve tarama alışkanlıkları ortaya istemiyoruz, VPN harika bir çözüm
(upbeat instrumental songs) – [Teacher] Hello, I'mMatt from Duo Safety.
On this video I'll teach you how to safeguard your PulseConnect Secure SSL VPN with Duo.
You'll want to reference the documentation for this configuration atduo.
com/docs/pulseconnect.
Before starting the set up approach, Ensure that Duo iscompatible using your Pulse VPN.
Go online to the administrator Internet interface and verify that yourfirmware is Variation eight.
two.
In addition, you have to Possess a practical Key authentication configuration for your SSL VPN end users, such as LDAP authenticationto Lively directory.
(upbeat instrumental audio) Log in into the Duo admin panel.
(upbeat instrumental new music) Within the still left facet bar, click applications.
Click “Defend anapplication” and sort juniper inside the search bar.
Underneath the entry for Juniper SSL VPN, simply click protect this application.
Your integration vital, secretkey, and API host title are presented for the topof the Qualities site.
You'll need these later on throughout setup.
Simply click the link to downloadthe Duo Juniper eight.
x package.
This file is customized in your account and it has your Duo account IDappended for the file identify.
Be aware that Duo's Juniper configuration is suitable with Pulse Hook up Safe and you may alter the displayname of the software at the bottom on the Attributes webpage.
For simple reference, changethe title of the software to Pulse Hook up Safe VPN.
(upbeat instrumental tunes) Click save improvements.
(upbeat instrumental tunes) Now modify the register site.
Log in to your Pulse Connect Safe administrator Net interface.
(upbeat instrumental audio) In the highest menu, navigateto authentication, signing in, register web pages.
(upbeat instrumental music) Simply click add custom web pages.
(upbeat instrumental songs) During the identify subject, kind Duo.
Set web page form to Accessibility.
(upbeat instrumental audio) Beside templates file, click on Search and select the Duo Juniper zip file you downloaded in the admin panel.
Don't decide on the “use custom made site for Pulse desktop consumer logon” or “prompt the secondary qualifications on the second web site” solutions, When they are current.
Test the skip validationchecks for the duration of add box.
Click on add custom webpages.
It's possible you'll ignore any warnings that show up.
Up coming include the Duo LDAP server.
Open up a whole new browser window and navigate to duo.
com/docs/pulseconnect.
(upbeat instrumental songs) Scroll all the way down to the “Insert theDuo LDAP Server” area with the documentation.
You will discover strings you cancopy from this section to create setup simpler.
(upbeat instrumental audio) In the very best menu of youradministrator interface, navigate to authentication, auth servers.
(upbeat instrumental music) During the auth server typelist, pick out LDAP server.
Click new server.
(upbeat instrumental new music) From the name subject, kind Duo-LDAP.
While in the LDAP server field, enter your API hostname from your software’s Houses web page inside the Duo admin panel.
(upbeat instrumental songs) Established the LDAP port to 636.
(upbeat instrumental new music) Within the LDAP server typedrop down, find generic.
Next to relationship, clickthe radio button for LDAPS.
In the authentication essential segment, check the “authenticationrequired to go looking LDAP” box.
(upbeat instrumental audio) Duplicate https://vpngoup.com the admin DN stringfrom the documentation website page and paste it while in the admin DN industry in the Pulse Secure Net interface.
(upbeat instrumental music) Switch the integrationunderscore critical variable using your integration key.
(upbeat instrumental new music) Then copy your solution vital and paste it while in the password subject.
In the obtaining consumer entries portion, duplicate the string you employed inthe admin DN section earlier mentioned and paste it in The bottom DN industry.
(upbeat instrumental tunes) Then duplicate the filter fromthe documentation website page and paste it while in the filterfield in the world wide web interface.
(upbeat instrumental songs) Simply click save.
(upbeat instrumental audio) After you click on preserve, youmight get a message indicating the LDAPserver is unreachable.
You may disregard this message.
Now you have to configure a user realm to the Duo LDAP server.
To accomplish this, you cancreate a brand new realm for testing, develop a realm to graduallymigrate users in the new procedure, or make use of the default buyers realm.
For this video, Now we have previously created a Duo end users team that we will configure to make use of Duo for secondary authentication.
In the VPN interface, navigate to consumers, consumer realms, and click on the url for your consumer realm you want to insert secondary authentication to.
Underneath the additionalauthentication servers segment, pick the “help additionalauthentication server” checkbox.
(upbeat instrumental songs) From the authentication variety two area, decide on Duo-LDAP.
Close to consumer identify is, decide on the radio button for predefined as and enter if It's not at all presently present.
(upbeat instrumental music) Close to password is, choose the button for specified by user on register web page.
(upbeat instrumental tunes) Verify the box for “endsession if authentication in opposition to this server fails”.
(upbeat instrumental songs) Simply click preserve improvements.
(upbeat instrumental tunes) Simply click the authentication coverage tab at the highest in the pageand then click password.
(upbeat instrumental audio) In the options for the extra authentication server section, select “make it possible for all buyers”.
Click help save modifications.
(upbeat instrumental songs) To complete setting up your integration, configure a check in policyfor secondary authentication.
In this instance We're going to use the default asterisk slash URL policy, however you can put in place a whole new sign in policy in a tailor made URL like asteriskslash Duo-testing for screening.
In the top menu, head to authentication, signing in, sign up guidelines.
(upbeat instrumental songs) Click the backlink with the sign in plan that you would like to switch.
While in the register website page listing, pick Duo.
(upbeat instrumental new music) During the authentication realm segment, select the radio button for “user picks from a list of authentication realms”.
Select the consumer realmyou configured earlier and click on add.
Make sure Here is the only picked realm for this sign in web site.
Click help you save improvements.
(upbeat instrumental tunes) With anything configured, it is now time to check your setup.
As part of your browser, navigate on the URL that you simply described for your check in policy.
(upbeat instrumental new music) Once you entire Most important authentication, the Duo Prompt seems.
Working with this prompt, consumers can enroll in Duo or entire two-element authentication.
Given that this user has alreadybeen enrolled in Duo, you can decide on send out me a force, contact me, or enter a passcode.
Pick out “send me a force” tosend a Duo drive notification to the smartphone.
On the phone, open up the notification, faucet the eco-friendly button toaccept, and you're logged in.
You've got productively established upDuo two-component authentication for you personally Pulse Link Safe VPN.
(upbeat instrumental music).