Page 2 of 2 FirstFirst 12
Results 11 to 14 of 14
  1. #11
    Untangler
    Join Date
    Sep 2008
    Posts
    41

    Default

    dmorris. So Untangle's official opinion is that our network setup is not required to have 2FA (or the 2FA PCI requirement does not apply) and I can continue to access from any remote internet system via single factor HTTPS authentication to my UT server which has access and control over my internal network which processes Cardholder data processing? That makes it easy and can continue to manage this remotely. Thanks

  2. #12
    Untangle Ninja jcoehoorn's Avatar
    Join Date
    Mar 2010
    Location
    York, NE
    Posts
    1,947

    Default

    Umm... I don't think that's what anyone said. We said, "Revert to defaults so that remote administration is turned off and install OpenVPN."
    Five time Microsoft ASP.Net MVP managing a Lenovo RD330 / E5-2420 / 16GB with Untangle 16.5 to protect a 1Gbps fiber link for ~450 residential college students and associated staff and faculty

  3. #13
    Untangler
    Join Date
    Apr 2009
    Posts
    63

    Default

    I am happy with the way we do it. We use captive portal. So first I have to VPN (we use openvpn) in, then input a user name/pw for captive portal, THEN https into UT.

    Hope this helps.

    FYI, on the captive portal, on the pass list I have the static IP of all devices that are not mobile devices. Like thin clients, servers, switches, printers, cameras.
    Not this crap again.

  4. #14
    Untangle Ninja jcoehoorn's Avatar
    Join Date
    Mar 2010
    Location
    York, NE
    Posts
    1,947

    Default

    In that case, access to a machine with one of the passed IPs would count for the second factor.
    Five time Microsoft ASP.Net MVP managing a Lenovo RD330 / E5-2420 / 16GB with Untangle 16.5 to protect a 1Gbps fiber link for ~450 residential college students and associated staff and faculty

Page 2 of 2 FirstFirst 12

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2