Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 4 down vote favorite

I'd like to increase my VPN security, and Google hasn't turned up anything with regard to VPN services and SecurId.

Does anyone know of services like this?

share|improve this question
1  
Heh, nowadays it's questionable if using SecurId will actually increase your security, or decrease it ;) – AviD♦ Apr 13 '11 at 18:30
1  
Do you specifically want SecurID (despite the recent RSA hack and unrelenting shroud of secrecy around the technology and how compromised it now is)? Or do you want a service that supports clearly good two-factor authn? – nealmcb Apr 13 '11 at 19:09
Edited the title. @Javoid - Please correct me if I mis-read your intentions. – Iszi Apr 13 '11 at 19:48
The title is now more accurate, thank you. It doesn't have to be SecureId, but I'd like to see a hardware dongle style authorization, or similar. – Javy Apr 13 '11 at 19:50

4 Answers

up vote 2 down vote

You could roll your own easily for cheap or free using Amazon's micro EC2 instances (http://aws.amazon.com/free) and our free two-factor auth from Duo (http://duosecurity.com) - either SSH-tunnelled (e.g. ssh -D 1080 my.ec2.host and set your local SOCKS proxy configuration to localhost:1080), or else using OpenVPN, etc.

share|improve this answer
up vote 0 down vote

I don't know of any that autenticate independently, but there are many that will authenticate against a SecurID authentication server. PIX appliances, for example, support this. Try http://www.google.com/search?q=cisco+securid+vpn

share|improve this answer
Thanks but I'm looking more for a service that provides VPN for x dollars a month, that also uses SecurId verification. – Javy Apr 13 '11 at 18:33
up vote 0 down vote

They don't provide the VPN itself so not sure if this is quite what you're after but Signify offer a hosted RSA SecurID service. They send you a token and you configure your VPN gateway to talk, over t'Internet to their RADIUS servers for authentication. Pricing is reasonable iirc.

share|improve this answer
Unfortunately, I need the service as well. I don't want to create my own VPN. I'm surprised it's so difficult to find a two-factor authentication VPN service for consumers or small businesses. – Javy Apr 13 '11 at 21:05
1  
@Javoid - it's because VPN services for big businesses are very profitable, so they pay back the relatively high initial costs quickly. For small businesses the initial costs aren't that much cheaper, but they need to charge a higher per-user cost to make it pay back. – Rory Alsop♦ Apr 13 '11 at 21:43
up vote 0 down vote

Hamachi employs two factor authentication - they describe a public-private key pair in their security white paper. Combined with the required network password you have a two factor consumer VPN solution (although neither of the factors is a token and a shared password's reliability decreases the more people that know it).

As an alternative you could look at a hosted openVPN solution such as dotBlock's openVPN stack; with full console access you could install WikID.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.