Sonicwall NSA Client VPN

[Vishal6]

Hi All,

Does DUO MFA has any limitation while integrating with Sonicwall NSA vpn client ?. Pls refer below article from where i find such wordings.

Duo Security

Duo Two-Factor Authentication for SonicWall SRA or SMA 100 Series SSL VPN...

Duo integrates with your SonicWall SRA SSL VPN to add two-factor authentication to any browser VPN login, complete with inline self-service enrollment and Duo Prompt. Continue reading for configuration instructions for Duo and SonicWall SRA.

If you are using SonicWall Mobile Connect client or SonicWall’s Global VPN Client using IPsec, or an unsupported device as listed below, then see the VPN Client Instructions to configure the SonicWall device to use Duo Security’s push authentication. The Duo Prompt shown in browsers does not work with SonicWall client VPN applications.

We do not support the Duo web-based prompt with:

• SMA 100 series devices or upgraded SRA devices with firmware versions before 9.0.0.2-13. SonicWall discontinued SMA v8.x support in September 2019, and discontinued v9.0.x support in October 2021. SonicWall Product Lifecycles
• SRA devices which have reached end of life, which includes SRA 1600, SRA 4600, SRA EX6000, and SRA EX7000. No update to 9.0.0.10 to address the issued a zero-day vulnerability alert is available for these end-of-life SRA appliances. Use at your own risk.
• SMA 1000 series devices which run v11 or v12 firmwares.
• NSA, TZ, or EX (Aventail) devices

[DuoKristina]

Vishal:

Duo Two-Factor Authentication for SonicWall SRA or SMA 100 Series SSL VPN with RADIUS and Duo Prompt | Duo Security

The integration documented here (radius_server_iframe) is NOT compatible with NSA.

You could add Duo to your NSA with RADIUS using our automatic push (radius_server_auto) or text challenge (radius_server_challenge) configurations.

Find generic radius_server_auto instructions here. All the types of RADIUS configurations are described in the Duo Authentication Proxy Reference.