Networks

Ask something
Discussion Locked

Advice: Terminal Server and fonefactor

0 helpful
11 replies

by andre.j.hawkins 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I keep coming across fonefactor when googling for two-factor and Terminal Server, but never heard of them. Does anyone have experience/recommendations? Has to be PCI compliant.

11 replies

by brian.samuela

Well, it's a pretty broad question. Financially? Technical Managability? User convenience? Technically it's pretty easy. You load the free software on your terminal server and follow the directions. Takes about a half hour to install.

by brian.samuela

User convenience, while I'm at it. 2nd factor authentication occurs through mobile or landline phone. User enters username and password through PC. Outbound call to user's phone number. User enter's "#". User can decide and manage which phone it goes to (i.e., what if out of range or out of battery)?

by andre.j.hawkins

Thanks, we took phonefactor for a little spin and it works pretty well in trial environment. Working on getting the management team to agree to deploy more broadly.

by brian.samuela

So here is another significant benefit. The Out of Band nature of the second factor. Almost everyone is attached to more than one network at a time these days. If you use more than one of them to establish identity, it creates all sorts of opportunities for enhanced security as well.

by andre.j.hawkins

Well, here is the argument: Free for a stripped down version, which is not so stripped down that it can't be implemented and used in perpetuity. Our terminal server has less than 50 users, some sort of arbitrary limit for whether you have to pay or not. Could actually implement for production.

by andre.j.hawkins

Have gotten the management team to go ahead with an implementation supporting both OWA and TS 2-Factor authentication. The users like it and the management likes it. Using a paid version, but strangely enough, management seems to value that which it pays for.

by kumar.jeff

We've gone ahead and deployed PhoneFactor for OWA 2-factor Authentication as well. We think we've had some trade secret leakage through email over the past couple months. We'll have to see whether this stanches the flow.

by brian.samuela

Big benefit is that users don't seem to be too offended being asked to use the PhoneFactor solution. Haven't gotten many complaints at all. I suppose it is because the process for second factor Authentication is pretty unobtrusive. Just receive a phone call and dial #. That's really not much to ask of them.

This discussion is closed to new replies.