RE: Multi-Factor Authentication

[Zhihao <zhihao () root sg>]

You might want to consider securecomputing's safeword premier access..its
more affordable than RSA..it acts like a radius server. However, the tokens
they offer are event based. Another one you may wish to consider is swivel.
This one sends the OTP to users via SMSes..but if you got employees in
different geographical locations..the cost might run alittle high.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of avasquez80 () gmail com
Sent: Thursday, 3 May, 2007 1:59 AM
To: security-basics () securityfocus com
Subject: Multi-Factor Authentication


I'm working on a project that involves giving our employees OWA and intranet
access through a Juniper SSL VPN from the web. Currently a hand full of
employees are using RSA keys to authenticate. While we can not go out and
buy over 3000+ RSA keys for every employee I'm looking for an alternate sign
on solution. My main goals are preventing someone from the outside brute
forcing their way in. I have seen one solution that looked promising called
vidoop. They offer a SSO which has pictured images as added security. I
would be curious to what others are using for OWA and other internal access
solutions.

Thanks.