Re: Two-factor Authentication

["Wright, A J (A. J.)" <ajw () TENNESSEE EDU>]

Obviously, we first prioritized moving our SAQ-D systems to less risky processes that don't require MFA.

For the ones that were left, we've used Duo Security's MFA solution.  It has been pretty painless: inexpensive, easy to 
manage, and it does what it says on the tin.  I like it enough that we're considering implementing it elsewhere.

Countdown to the Duo sales call ...
ajw
--
A. J. Wright
Chief Information Security Officer

University of Tennessee - System Administration
2309 Kingston Pike, Suite 131C
Knoxville, TN  37996-1717
Phone:  865-974-0637
Email: ajw () tennessee edu<mailto:ajw () tennessee edu>

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
McClenon, Brady
Sent: Tuesday, January 15, 2013 1:42 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Two-factor Authentication

I'm wondering if anyone is willing to share what methods/products their institution is using to facilitate two-factor 
authentication for PCI-DSS compliance, or I suppose even if your usage has nothing to do with PCI.

Brady McClenon
Senior Server Administrator
Applications Research & Development
Information Technology Services
SUNY College at Oneonta
607-436-3203

"Quotes found on the internet are not always accurate."  - Abraham Lincoln