Firebox and RSA

[beppo]

Hi,

does anyone have an "how to implement a firebox 2500 with rsa 5.0 server authentication for muvpn authentication"?

i would like to implement it, but i don´t find the right way how to handle the firewall on the server.
what do i have to do first?

Any suggestions are very welcome.

 

[Ntr0P]

From WatchGuard's site:

For SecurID authentication to work, the RADIUS and ACE/Server servers must first be correctly configured. In addition, users must have a valid SecurID token and PIN number. Please see the relevant documentation for these products.

Note: WatchGuard does not support the third-party program Steel Belted RADIUS for use with SecurID. You should use the RADIUS program bundled with the RSA SecurID software. 

From Policy Manager:
Select Setup => Authentication Servers.
The Authentication Servers dialog box appears.
Click the SecurID Server tab.
You might need to use the arrow buttons in the upper-right corner of the dialog box to bring this tab into view.
Enter the IP address of the SecurID server.
Enter or verify the port number used for SecurID authentication.
The default is 1645.
Enter the value of the secret shared between the Firebox and the SecurID server.
The shared secret is case-sensitive and must be identical on the Firebox and the SecurID server.
If you are using a backup server, enable the Specify backup SecurID server checkbox. Enter the IP address and port number for the backup server.
Click OK.

On the RADIUS Server:
Add the IP address of the Firebox where appropriate according to the RADIUS server vendor.
Some RADIUS vendors may not require this. To determine if this is required for your implementation, check the RADIUS server vendor documentation.
Take the user or group aliases gathered from the service properties' listboxes and add them to the defined Filter-IDs in the RADIUS configuration file. For more information, consult the RADIUS server documentation.
For example, to add the groups Sales, Marketing, and Engineering enter:
 Filter-Id="Sales"
Filter-Id="Marketing"
Filter-Id="Engineering"

Note: The filter rules for RADIUS user filter-IDs are case sensitive.

 

[beppo]

Hi,

Thank you very much for your help.