authentication

Enhancing Security with Duo Two-Factor Authentication for Cisco Firepower Threat Defense (FTD) VPN and Secure Client

by
Enhancing Security with Duo Two-Factor Authentication for Cisco Firepower Threat Defense (FTD) VPN and Secure Client

The Duo integration with Cisco Firepower Threat Defense (FTD) SSL VPN allows for two-factor authentication on AnyConnect or Secure Client VPN logins. Duo MFA for FTD supports push, phone call, or passcode authentication for SSL encrypted VPN connections, but does not include the interactive Duo Prompt for web-based logins. These instructions explain the process of … Read more

Enhancing Security with Two-Factor Authentication on Citrix Web Interface

by
Enhancing Security with Duo Two-Factor Authentication for Cisco Firepower Threat Defense (FTD) VPN and Secure Client

Duo has integrated with Citrix Web Interface to provide two-factor authentication for users. Citrix RADIUS configurations using the traditional iframe-based Duo Prompt have reached the end of support, and customers migrating to RADIUS configurations without iframe, like RADIUS with Automatic Push, should ensure continued support. Given that Citrix Web Interface is a product marked for … Read more

How Threat Actors Target Multi-Factor Authentication according to Cisco Talos

by
How Threat Actors Target Multi-Factor Authentication according to Cisco Talos

In the latest Cisco Talos Incident Response Quarterly Trends Report, Hazel Burton discusses the growing trend of threat actors focusing on bypassing multi-factor authentication (MFA) in security incidents. The report found that MFA weaknesses were present in half of the incidents responded to by the Talos team in the first quarter of 2024. Attackers are … Read more

Attackers can bypass authentication on VMware ESXi due to vulnerability

by
Attackers can bypass authentication on VMware ESXi due to vulnerability

VMware has disclosed three critical vulnerabilities in its ESXi hypervisor that could allow attackers to bypass authentication mechanisms. These vulnerabilities, identified as CVE-2024-37085, CVE-2024-37086, and CVE-2024-37087, pose significant risks to organizations utilizing VMware ESXi in their virtualized environments. The vulnerabilities impact the authentication processes within VMware ESXi, potentially enabling unauthorized access to the system. CVE-2024-37085 … Read more

Beginning in July, Microsoft will implement mandatory Azure multi-factor authentication.

by
Beginning in July, Microsoft will implement mandatory Azure multi-factor authentication.

Starting in July, Microsoft will enforce multi-factor authentication (MFA) for all users signing into Azure to manage resources. After the Azure portal deployment, the MFA app will see a similar deployment for CLI, PowerShell, and Terraform. Customers will receive notifications before MFA goes into effect. Tokens-based automation accounts are excluded. Users like students and guests … Read more

AWS re:Inforce Emphasizes Importance of Security Culture through Multi-Factor Authentication (MFA)

by
AWS re:Inforce Emphasizes Importance of Security Culture through Multi-Factor Authentication (MFA)

At the recent AWS re:Inforce conference in Philadelphia, AWS CISO Chris Betz emphasized the importance of maintaining a culture focused on security as a top priority. He highlighted the dedication to security culture at AWS, led by CEO Matt Garman, where security leaders have the opportunity to meet with individual service teams to discuss important … Read more

Instructions for Setting Up Secondary Authentication for NetScaler Duo

by
Enhancing Security with Duo Two-Factor Authentication for Cisco Firepower Threat Defense (FTD) VPN and Secure Client

Duo Security integrates with your on-premises NetScaler to provide two-factor authentication for remote access logins. Duo supports self-service enrollment and Duo Prompt through a web browser for Citrix Gateway login. Additionally, for Citrix Receiver or Workspace connections, Duo supports passcodes, phone, and push authentication. The configuration allows Duo to act as a secondary RADIUS authentication … Read more

NetScaler (formerly Citrix Gateway) enhanced with Two-Factor Authentication

by
Enhancing Security with Duo Two-Factor Authentication for Cisco Firepower Threat Defense (FTD) VPN and Secure Client

Duo Security offers two-factor authentication for Citrix Gateway through integration with on-premises NetScaler. This includes support for interactive enrollment, passcodes, phone, and push authentication methods. Integration requires setting up two RADIUS policies for primary authentication, one each for browser-based Gateway logins and Receiver or Workspace client connections. The Duo Authentication Proxy handles both primary and … Read more

Microsoft offers Windows administrators respite while pushing hard for multi-factor authentication

by
Microsoft offers Windows administrators respite while pushing hard for multi-factor authentication

Microsoft has announced changes to how Windows updates are managed and clarified its requirement for multi-factor authentication (MFA) for all Azure users. The deployment service Windows Update for Business will soon allow feature updates to be offered as optional instead of force-installed, giving administrators more flexibility in managing Windows devices. Previously, feature updates were mandatory, … Read more