VPNGoupCom Herkes çevrimiçi güvenlik ve gizlilik konusunda endişe ve kişisel bilgilerini ve tarama alışkanlıkları ortaya istemiyoruz, VPN harika bir çözüm
(upbeat instrumental tunes) – [Teacher] Hi, I'mMatt from Duo Stability.
In this video clip I'll show you how to safeguard your PulseConnect Protected SSL VPN with Duo.
Make sure to reference the documentation for this configuration atduo.
com/docs/pulseconnect.
Before beginning the setup course of action, Guantee that Duo iscompatible together with your Pulse VPN.
Go online in your administrator World wide web interface and verify that yourfirmware is Model 8.
2.
Furthermore, you'll want to Have got a purposeful Key authentication configuration in your SSL VPN end users, like LDAP authenticationto active directory.
(upbeat instrumental songs) Log in to your Duo admin panel.
(upbeat instrumental new music) Inside the still left facet bar, simply click apps.
Click “Safeguard anapplication” and kind juniper during the look for bar.
Underneath the entry for Juniper SSL VPN, simply click guard this software.
Your integration key, secretkey, and API host name are furnished for the topof the Attributes web page.
You will need these later on during setup.
Click on the link to downloadthe Duo Juniper 8.
x package deal.
This file is custom-made for your personal account and has your Duo account IDappended into the file identify.
Note that Duo's Juniper configuration is appropriate with Pulse Connect Safe and you will alter the displayname of this application at The underside on the properties page.
For straightforward reference, changethe name of this application to Pulse Connect Safe VPN.
(upbeat instrumental tunes) Click on preserve improvements.
(upbeat instrumental tunes) Now modify the sign in site.
Log in for your Pulse Link Protected administrator Internet interface.
(upbeat instrumental songs) In the best menu, navigateto authentication, signing in, register pages.
(upbeat instrumental music) Simply click add tailor made internet pages.
(upbeat instrumental new music) Within the title field, variety Duo.
Set page kind to Entry.
(upbeat instrumental music) Next to templates file, simply click Search and choose the Duo Juniper zip file you downloaded with the admin panel.
Usually do not pick the “use custom made web page for Pulse desktop shopper logon” or “prompt the secondary qualifications on the next web page” possibilities, Should they be present.
Check out the skip validationchecks through upload box.
Simply click upload custom made webpages.
You may dismiss any warnings that look.
Upcoming include the Duo LDAP server.
Open a whole new https://vpngoup.com browser window and navigate to duo.
com/docs/pulseconnect.
(upbeat instrumental music) Scroll right down to the “Insert theDuo LDAP Server” segment on the documentation.
You'll find strings you cancopy from this part to produce set up less complicated.
(upbeat instrumental tunes) In the very best menu of youradministrator interface, navigate to authentication, auth servers.
(upbeat instrumental audio) In the auth server typelist, choose LDAP server.
Click new server.
(upbeat instrumental music) During the name discipline, variety Duo-LDAP.
Inside the LDAP server area, enter your API hostname from a software’s Houses web page inside the Duo admin panel.
(upbeat instrumental new music) Set the LDAP port to 636.
(upbeat instrumental tunes) In the LDAP server typedrop down, pick generic.
Close to relationship, clickthe radio button for LDAPS.
Within the authentication required portion, check the “authenticationrequired to look LDAP” box.
(upbeat instrumental audio) Copy the admin DN stringfrom the documentation web site and paste it inside the admin DN area in the Pulse Secure Net interface.
(upbeat instrumental new music) Substitute the integrationunderscore crucial variable with all your integration key.
(upbeat instrumental tunes) Then copy your solution key and paste it during the password discipline.
During the finding user entries area, copy the string you made use of inthe admin DN area higher than and paste it in The bottom DN area.
(upbeat instrumental new music) Then copy the filter fromthe documentation page and paste it during the filterfield in the online interface.
(upbeat instrumental new music) Click on preserve.
(upbeat instrumental new music) Once you simply click preserve, youmight get a concept indicating the LDAPserver is unreachable.
You may disregard this information.
Now you might want to configure a person realm to the Duo LDAP server.
To accomplish this, you cancreate a new realm for testing, produce a realm to graduallymigrate users in the new method, or make use of the default end users realm.
For this movie, We have now already produced a Duo buyers team that we will configure to make use of Duo for secondary authentication.
In the VPN interface, navigate to users, person realms, and click on the hyperlink for your consumer realm you should incorporate secondary authentication to.
Under the additionalauthentication servers part, find the “empower additionalauthentication server” checkbox.
(upbeat instrumental music) While in the authentication number two area, pick Duo-LDAP.
Beside user title is, pick out the radio button for predefined as and enter if It's not necessarily previously existing.
(upbeat instrumental new music) Next to password is, find the button for specified by consumer on sign in page.
(upbeat instrumental tunes) Examine the box for “endsession if authentication in opposition to this server fails”.
(upbeat instrumental tunes) Simply click save improvements.
(upbeat instrumental tunes) Simply click the authentication plan tab at the best on the pageand then click password.
(upbeat instrumental audio) From the selections for the additional authentication server section, find “allow for all end users”.
Click save alterations.
(upbeat instrumental music) To finish setting up your integration, configure a sign up policyfor secondary authentication.
In this example we will make use of the default asterisk slash URL policy, however you can setup a completely new check in policy at a personalized URL like asteriskslash Duo-testing for screening.
In the highest menu, go to authentication, signing in, sign in insurance policies.
(upbeat instrumental songs) Click on the link for the sign in plan you want to change.
Within the register website page checklist, find Duo.
(upbeat instrumental audio) Inside the authentication realm portion, pick out the radio button for “user picks from an index of authentication realms”.
Choose the person realmyou configured previously and click on insert.
Make certain This can be the only picked realm for this register web site.
Click on help you save variations.
(upbeat instrumental new music) With anything configured, it is currently time to check your setup.
In the browser, navigate for the URL that you described to your sign in plan.
(upbeat instrumental songs) After you total Most important authentication, the Duo Prompt appears.
Using this prompt, people can enroll in Duo or full two-aspect authentication.
Considering the fact that this user has alreadybeen enrolled in Duo, you could find deliver me a force, get in touch with me, or enter a passcode.
Select “ship me a thrust” tosend a Duo force notification in your smartphone.
On your own cellphone, open the notification, faucet the inexperienced button toaccept, and you simply're logged in.
You may have correctly established upDuo two-issue authentication for you personally Pulse Link Secure VPN.
(upbeat instrumental songs).