{"id":36872,"date":"2019-10-31T22:14:26","date_gmt":"2019-10-31T19:14:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn\/"},"modified":"2019-10-31T22:14:26","modified_gmt":"2019-10-31T19:14:26","slug":"go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","title":{"rendered":"Prejdite na 2FA (Dvojfaktorov\u00e1 autentifik\u00e1cia pre ASA SSL VPN)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pot\u0159eba poskytnout vzd\u00e1len\u00fd p\u0159\u00edstup k firemn\u00edm prost\u0159ed\u00edm se vyskytuje \u010d\u00edm d\u00e1l \u010dast\u011bji, a\u0165 u\u017e jde o vlastn\u00ed u\u017eivatele, nebo partnery, kte\u0159\u00ed pot\u0159ebuj\u00ed p\u0159\u00edstup k ur\u010dit\u00e9mu serveru ve va\u0161\u00ed organizaci.<\/p>\n

Pro tyto \u00fa\u010dely v\u011bt\u0161ina spole\u010dnost\u00ed pou\u017e\u00edv\u00e1 technologii VPN, kter\u00e1 se osv\u011bd\u010dila jako spolehliv\u00fd a zabezpe\u010den\u00fd zp\u016fsob poskytov\u00e1n\u00ed p\u0159\u00edstupu k intern\u00edm zdroj\u016fm organizace.<\/p>\n

Moje spole\u010dnost nen\u00ed v\u00fdjimkou a my, stejn\u011b jako mnoz\u00ed jin\u00ed, tuto technologii vyu\u017e\u00edv\u00e1me. A podobn\u011b jako mnoz\u00ed jin\u00ed pou\u017e\u00edv\u00e1me jako br\u00e1nu pro vzd\u00e1len\u00fd p\u0159\u00edstup \u2013 Cisco ASA 55xx.<\/p>\n

Se zvy\u0161uj\u00edc\u00edm se po\u010dtem vzd\u00e1len\u00fdch u\u017eivatel\u016f se objevuje pot\u0159eba usnadnit proces vyd\u00e1v\u00e1n\u00ed p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f. Je v\u0161ak nutn\u00e9 to prov\u00e9st bez jak\u00e9hokoli ohro\u017een\u00ed bezpe\u010dnosti.<\/p>\n

Na\u0161li jsme \u0159e\u0161en\u00ed v aplikaci dvoufaktorov\u00e9 autentizace pro p\u0159ipojen\u00ed p\u0159es Cisco SSL VPN<\/a>, pou\u017e\u00edvaj\u00edc\u00ed jednor\u00e1zov\u00e9 hesla. Tento p\u0159\u00edsp\u011bvek se bude zab\u00fdvat t\u00edm, jak zorganizovat podobn\u00e9 \u0159e\u0161en\u00ed s minim\u00e1ln\u00edmi \u010dasov\u00fdmi n\u00e1roky a s nulov\u00fdmi n\u00e1klady na pot\u0159ebn\u00fd software (za p\u0159edpokladu, \u017ee Cisco ASA je ji\u017e ve va\u0161\u00ed infrastruktu\u0159e).<\/p>\n

Trh je p\u0159epln\u011bn hotov\u00fdmi \u0159e\u0161en\u00edmi pro generov\u00e1n\u00ed jednor\u00e1zov\u00fdch hesel, p\u0159i\u010dem\u017e nab\u00edz\u00ed mnoho mo\u017enost\u00ed jejich z\u00edsk\u00e1n\u00ed, a\u0165 u\u017e zasl\u00e1n\u00edm hesla prost\u0159ednictv\u00edm SMS nebo pou\u017eit\u00edm token\u016f, a\u0165 u\u017e hardwarov\u00fdch nebo softwarov\u00fdch (nap\u0159\u00edklad na mobiln\u00edm telefonu). Ale touha po \u00faspor\u00e1ch a snaha u\u0161et\u0159it pen\u00edze pro sv\u00e9ho zam\u011bstnavatele, v r\u00e1mci sou\u010dasn\u00e9 krize m\u011b p\u0159im\u011bla naj\u00edt zdarma dostupn\u00fd zp\u016fsob realizace slu\u017eby generov\u00e1n\u00ed jednor\u00e1zov\u00fdch hesel. Kter\u00fd, p\u0159esto\u017ee je zdarma, se m\u00e1lo \u010d\u00edm li\u0161\u00ed od komer\u010dn\u00edch \u0159e\u0161en\u00ed (je t\u0159eba uv\u00e9st, \u017ee tento produkt m\u00e1 i komer\u010dn\u00ed verzi, ale domluvili jsme se, \u017ee n\u00e1klady, co se t\u00fd\u010de pen\u011bz, budou nulov\u00e9).
\n<\/a><\/noindex>
\nTak\u017ee budeme pot\u0159ebovat:<\/p>\n

\u2014 Obraz Linuxu se sadou n\u00e1stroj\u016f \u2013 multiOTP, FreeRADIUS a nginx, pro p\u0159\u00edstup k serveru p\u0159es web (http:\/\/download.multiotp.net\/ \u2013 pou\u017eil jsem hotov\u00fd obraz pro VMware)
\n \u2014 Server Active Directory
\n \u2014 Samotn\u00fd Cisco ASA (j\u00e1, pro pohodl\u00ed, pou\u017e\u00edv\u00e1m ASDM)
\n \u2014 Jak\u00fdkoli softwarov\u00fd token podporuj\u00edc\u00ed mechanismus TOTP (j\u00e1 nap\u0159\u00edklad pou\u017e\u00edv\u00e1m Google Authenticator, ale hod\u00ed se i FreeOTP)<\/p>\n

Nep\u00f4jdem do podrobnost\u00ed roz\u0161\u00edrenia obrazu. Na v\u00fdstupe dostanete Debian Linux s u\u017e nain\u0161talovan\u00fdmi multiOTP a FreeRADIUS, nastaven\u00fdmi na spolupr\u00e1cu a webov\u00fdm rozhran\u00edm na spr\u00e1vu OTP.<\/p>\n

Krok 1. Iniciujeme syst\u00e9m a nastavujeme ho pod\u013ea svojej siete.<\/b>
\nSyst\u00e9m je predvolene dod\u00e1van\u00fd s \u00fadajmi root root. Mysl\u00edm, \u017ee v\u0161etci tu\u0161ia, \u017ee by nebolo zl\u00e9 zmeni\u0165 heslo pou\u017e\u00edvate\u013ea root po prvom prihl\u00e1sen\u00ed. Taktie\u017e je potrebn\u00e9 zmeni\u0165 sie\u0165ov\u00e9 nastavenia (predvolene je to '192.168.1.44' so br\u00e1nou '192.168.1.1'). N\u00e1sledne je mo\u017en\u00e9 re\u0161tartova\u0165 syst\u00e9m.<\/p>\n

V Active Directory vytvor\u00edme pou\u017e\u00edvate\u013ea. otp<\/b>, s heslom MySuperPassword<\/b>.<\/p>\n

Krok 2. Nastavujeme pripojenie a importujeme pou\u017e\u00edvate\u013eov Active Directory.<\/b>
\nNa to budeme potrebova\u0165 pr\u00edstup do konzoly a s\u00fabor multiotp.php<\/b>, prostredn\u00edctvom ktor\u00e9ho nastav\u00edme parametre pripojenia k Active Directory.<\/p>\n

Prejdite do adres\u00e1ra \/usr\/local\/bin\/multiotp\/<\/i> a postupne vykon\u00e1vame nasleduj\u00face pr\u00edkazy:<\/p>\n

.\/multiotp.php -config default-request-prefix-pin=0<\/code><\/pre>\n
\nUr\u010duje, \u010di je potrebn\u00e9 zada\u0165 \u010fal\u0161\u00ed (trval\u00fd) pin pri zad\u00e1van\u00ed jednorazov\u00e9ho pinu (0 alebo 1).<\/p>\n
.\/multiotp.php -config default-request-ldap-pwd=0<\/code><\/pre>\n
\nUr\u010duje, \u010di je potrebn\u00e9 zada\u0165 dom\u00e9nov\u00e9 heslo pri zad\u00e1van\u00ed jednorazov\u00e9ho pinu (0 alebo 1).<\/p>\n
.\/multiotp.php -config ldap-server-type=1<\/code><\/pre>\n
\nUv\u00e1dza typ LDAP servera (0 = oby\u010dajn\u00fd LDAP server, v na\u0161om pr\u00edpade 1 = Active Directory).<\/p>\n
.\\\/multiotp.php -config ldap-cn-identifier=\"sAMAccountName\"<\/code><\/pre>\n
\nUr\u010duje form\u00e1t, v akom sa m\u00e1 zobrazova\u0165 meno pou\u017e\u00edvate\u013ea (t\u00e1to hodnota zobraz\u00ed iba meno, bez dom\u00e9ny).<\/p>\n
.\\\/multiotp.php -config ldap-group-cn-identifier=\"sAMAccountName\"<\/code><\/pre>\n
\nTo ist\u00e9, len pre skupinu.<\/p>\n
.\\\/multiotp.php -config ldap-group-attribute=\"memberOf\"<\/code><\/pre>\n
\nUr\u010duje met\u00f3du ur\u010denia pr\u00edslu\u0161nosti pou\u017e\u00edvate\u013ea k skupine.<\/p>\n
.\/multiotp.php -config ldap-ssl=1<\/code><\/pre>\n
\n\u010ci pou\u017e\u00edva\u0165 zabezpe\u010den\u00e9 pripojenie k LDAP serveru (samozrejme \u2013 \u00e1no!).<\/p>\n
.\/multiotp.php -config ldap-port=636<\/code><\/pre>\n
\nPort pre pripojenie k LDAP serveru.<\/p>\n
.\/multiotp.php -config ldap-domain-controllers=adSRV.domain.local<\/code><\/pre>\n
\nAdresa v\u00e1\u0161ho servera Active Directory.<\/p>\n
.\\\/multiotp.php -config ldap-base-dn=\"CN=Users,DC=domain,DC=local\"<\/code><\/pre>\n
\nUve\u010fte, odkia\u013e za\u010da\u0165 vyh\u013ead\u00e1vanie pou\u017e\u00edvate\u013eov v dom\u00e9ne.<\/p>\n
.\\\/multiotp.php -config ldap-bind-dn=\"otp@domain.local\"<\/code><\/pre>\n
\nUve\u010fte pou\u017e\u00edvate\u013ea, ktor\u00fd m\u00e1 pr\u00e1va na vyh\u013ead\u00e1vanie v Active Directory.<\/p>\n
.\\\/multiotp.php -config ldap-server-password=\"MySuperPassword\"<\/code><\/pre>\n
\nUve\u010fte heslo pou\u017e\u00edvate\u013ea pre pripojenie k Active Directory.<\/p>\n
.\/multiotp.php -config ldap-network-timeout=10<\/code><\/pre>\n
\nNastavte \u010dasov\u00fd limit pre pripojenie k Active Directory.<\/p>\n
.\/multiotp.php -config ldap-time-limit=30<\/code><\/pre>\n
\nNastavte \u010dasov\u00e9 obmedzenie na oper\u00e1ciu importu pou\u017e\u00edvate\u013eov.<\/p>\n
.\/multiotp.php -config ldap-activated=1<\/code><\/pre>\n
\nAktivujeme konfigur\u00e1ciu pripojenia k Active Directory<\/p>\n
.\\\/multiotp.php -debug -display-log -ldap-users-sync<\/code><\/pre>\n
\nImportujeme pou\u017e\u00edvate\u013eov z Active Directory<\/p>\n
Krok 3. Generujeme QR k\u00f3d pre token<\/b>
\nTu je v\u0161etko ve\u013emi jednoduch\u00e9. Otvor\u00edme webov\u00e9 rozhranie OTP servera v prehliada\u010di, prihl\u00e1sime sa (nezabudnite zmeni\u0165 predvolen\u00e9 heslo pre administr\u00e1tora!) a stla\u010d\u00edme tla\u010didlo \u201eTla\u010di\u0165\u201c:<\/p>\n
\"Prejdite
\nV\u00fdsledkom tejto akcie bude str\u00e1nka, na ktorej bud\u00fa dva QR k\u00f3dy. Na prv\u00fd z nich sa m\u00f4\u017eeme pokojne vyka\u0161la\u0165 (napriek l\u00e1kav\u00e9mu n\u00e1pisu Google Authenticator \/ Authenticator \/ 2 Steps Authenticator), a op\u00e4\u0165 pokojne naskenujeme druh\u00fd k\u00f3d do softv\u00e9rovej token aplik\u00e1cie na telef\u00f3ne:<\/p>\n
\"Prejdite
\n(\u00e1no, schv\u00e1lne som pokazil QR k\u00f3d, aby sa stal ne\u010diteln\u00fdm).<\/p>\n
Po vykonan\u00ed t\u00fdchto akci\u00ed sa vo va\u0161ej aplik\u00e1cii ka\u017ed\u00fdch tridsa\u0165 sek\u00fand za\u010dne generova\u0165 \u0161es\u0165cifern\u00e9 heslo.<\/p>\n
Pre istotu m\u00f4\u017eete vykona\u0165 kontrolu v tom istom rozhran\u00ed:<\/p>\n
\"Prejdite
\nZadajte meno pou\u017e\u00edvate\u013ea a jednorazov\u00e9 heslo z aplik\u00e1cie na telef\u00f3ne. Dostali ste kladn\u00fa odpove\u010f? Potom ideme \u010falej.<\/p>\n
Krok 4. Dola\u010fujeme a testujeme funkciu FreeRADIUS<\/b>
\nAko som u\u017e spomenul, multiOTP je u\u017e nastaven\u00fd na pr\u00e1cu s FreeRADIUS, ost\u00e1va len uskuto\u010dni\u0165 testy a prida\u0165 do konfigura\u010dn\u00e9ho s\u00faboru FreeRADIUS inform\u00e1cie o na\u0161om VPN br\u00e1ne.<\/p>\n
Vr\u00e1time sa do konzoly servera, do adres\u00e1ra \/usr\/local\/bin\/multiotp\/<\/i>, zad\u00e1me:<\/p>\n
.\\\/multiotp.php -config debug=1\\n.\\\/multiotp.php -config display-log=1<\/code><\/pre>\n
\n\u010c\u00edm zapneme podrobnej\u0161ie logovanie.<\/p>\n
V konfigura\u010dnom s\u00fabore klientov FreeRADIUS (\/etc\/freeradius\/clinets.conf<\/i>) zakomentujeme v\u0161etky riadky t\u00fdkaj\u00face sa localhost<\/b> a prid\u00e1me dve polo\u017eky:<\/p>\n
client localhost {\\n        ipaddr = 127.0.0.1\\n        secret          = testing321\\n        require_message_authenticator = no\\n}<\/code><\/pre>\n
\n \u2014 pre test<\/p>\n
client 192.168.1.254\\\/32 {\\n        shortname =     CiscoASA\\n        secret =        ConnectToRADIUSSecret\\n}<\/code><\/pre>\n
\n \u2014 pre na\u0161u VPN br\u00e1nu.<\/p>\n
Re\u0161tartujeme FreeRADIUS a vysk\u00fa\u0161ame sa prihl\u00e1si\u0165:<\/p>\n
radtest username 100110 localhost 1812 testing321<\/code><\/pre>\n
\nkde username <\/i>= meno pou\u017e\u00edvate\u013ea, 100110 <\/i>= heslo, ktor\u00e9 n\u00e1m aplik\u00e1cia na telef\u00f3ne poskytla, localhost <\/i>= adresa RADIUS servera, 1812 <\/i> \u2014 port RADIUS servera, testing321 <\/i> \u2014 heslo klienta RADIUS servera (ktor\u00e9 sme uviedli v konfigur\u00e1cii).<\/p>\n
V\u00fdsledkom tejto pr\u00edkazu by mal by\u0165 v\u00fdstup, pribli\u017ene v nasledovnom znen\u00ed:<\/p>\n
Odosielam Access-Request s id 44 na 127.0.0.1 port 1812\n        User-Name = \"username\"\n        User-Password = \"100110\"\n        NAS-IP-Address = 127.0.1.1\n        NAS-Port = 1812\n        Message-Authenticator = 0x00000000000000000000000000000000\nrad_recv: Access-Accept packet od host 127.0.0.1 port 1812, id=44, length=20<\/code><\/pre>\n
\nTeraz mus\u00edme zabezpe\u010di\u0165, aby sa pou\u017e\u00edvate\u013e \u00faspe\u0161ne autentifikoval. Na tento \u00fa\u010del sa pozrieme do logu multiotp:<\/p>\n
tail \/var\/log\/multiotp\/multiotp.log<\/code><\/pre>\n
\nA ak posledn\u00fdm z\u00e1znamom tam bude:<\/p>\n
2016-09-01 08:58:17     notice  username  User    OK: Pou\u017e\u00edvate\u013e username sa \u00faspe\u0161ne prihl\u00e1sil z 127.0.0.1\n2016-09-01 08:58:17     debug           Debug   Debug: 0 OK: Token bol akceptovan\u00fd z 127.0.0.1<\/code><\/pre>\n
\nPotom v\u0161etko prebehlo \u00faspe\u0161ne a m\u00f4\u017eeme vykona\u0165<\/p>\n
Krok 5. Konfigur\u00e1cia Cisco ASA<\/b>
\nPredpokladajme, \u017ee u\u017e m\u00e1me nastaven\u00fa skupinu a politiky pre pr\u00edstup cez SSL VPN, nastaven\u00e9 v spojen\u00ed s Active Directory, a potrebujeme prida\u0165 dvojfaktorov\u00fa autentifik\u00e1ciu pre tento profil.<\/p>\n
1.<\/strong> Prid\u00e1vame nov\u00fa skupinu serverov<\/a> AAA:<\/p>\n
\"Prejdite
\n2.<\/strong> Prid\u00e1vame do skupiny n\u00e1\u0161 multiOTP server:<\/p>\n
\"Prejdite
\n3.<\/strong> Upravujeme profil pripojenia<\/b>, pri\u010dom ako hlavn\u00fd autentifika\u010dn\u00fd server nastav\u00edme skupinu serverov Active Directory:<\/p>\n
\"Prejdite
\n4.<\/strong> Na karte Advanced -> Authentification<\/b> rovnako vyber\u00e1me skupinu serverov Active Directory:<\/p>\n
\"Prejdite
\n5.<\/strong> Na karte Advanced -> Secondary<\/b> v autentifik\u00e1cii vyber\u00e1me vytvoren\u00fa skupinu serverov, v ktorej je zap\u00edsan\u00fd multiOTP-server. Ozna\u010dujeme, \u017ee Session username sa ded\u00ed z prim\u00e1rnej skupiny serverov AAA:<\/p>\n
\"Prejdite
\nAplikujeme nastavenia a<\/p>\n
Krok 6, ten posledn\u00fd<\/b>
\nKontrolujeme, \u010di funguje dvojfaktorov\u00e1 autentifik\u00e1cia pre SSL VPN:<\/p>\n
\"Prejdite
\nVua-la! Pri pripojen\u00ed prostredn\u00edctvom Cisco AnyConnect VPN Client sa tie\u017e bude p\u00fdta\u0165 druh\u00e9ho, jednorazov\u00e9ho, hesla.<\/p>\n
D\u00fafam, \u017ee tento \u010dl\u00e1nok pom\u00f4\u017ee niekomu a \u017ee niekomu poskytne podnet na zamyslenie, ako mo\u017eno vyu\u017ei\u0165 tento, je bezplatn\u00fd<\/b> OTP-server na \u010fal\u0161ie \u00falohy. Pode\u013ete sa v koment\u00e1roch, ak budete ma\u0165 chu\u0165.
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u0441\u0435 \u0447\u0430\u0449\u0435 \u0438 \u0447\u0430\u0449\u0435, \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0431\u0443\u0434\u044c \u0442\u043e \u0441\u0432\u043e\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u043b\u0438 \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u043e\u043c\u0443 \u0438\u043b\u0438 \u0438\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0414\u043b\u044f \u044d\u0442\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VPN, \u0437\u0430\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0443\u044e \u0441\u0435\u0431\u044f, \u043a\u0430\u043a \u043d\u0430\u0434\u0435\u0436\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041c\u043e\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u0442\u0430\u043b\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27626,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36872","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Prejdite na 2FA (Dvojfaktorov\u00e1 autentifik\u00e1cia pre ASA SSL VPN) | ProHoster","description":"Potreba poskytova\u0165 vzdialen\u00fd pr\u00edstup k podnikate\u013esk\u00e9mu prostrediu sa objavuje \u010doraz \u010dastej\u0161ie, bez oh\u013eadu na to, \u010di ide o na\u0161ich pou\u017e\u00edvate\u013eov alebo partnerov, ktor\u00ed potrebuj\u00fa pr\u00edstup k tak\u00e9mu alebo onak\u00e9mu serveru vo va\u0161ej organiz\u00e1cii..","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Go to 2FA (\u0414\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u043b\u044f ASA SSL VPN) | ProHoster","og:description":"\u041f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u0441\u0435 \u0447\u0430\u0449\u0435 \u0438 \u0447\u0430\u0449\u0435, \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0431\u0443\u0434\u044c \u0442\u043e \u0441\u0432\u043e\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u043b\u0438 \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u043e\u043c\u0443 \u0438\u043b\u0438 \u0438\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438..","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:14:26+00:00","article:modified_time":"2019-10-31T19:14:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36872","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:05:56","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:37:23","updated":"2026-02-09 17:05:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/36872","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=36872"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/36872\/revisions"}],"predecessor-version":[{"id":158589,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/36872\/revisions\/158589"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/27626"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=36872"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=36872"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=36872"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}