7

I'd like to increase my VPN security, and Google hasn't turned up anything with regard to VPN services and SecurId.

Does anyone know of services like this?

4
  • 1
    Heh, nowadays it's questionable if using SecurId will actually increase your security, or decrease it ;)
    – AviD
    Apr 13 '11 at 18:30
  • 1
    Do you specifically want SecurID (despite the recent RSA hack and unrelenting shroud of secrecy around the technology and how compromised it now is)? Or do you want a service that supports clearly good two-factor authn?
    – nealmcb
    Apr 13 '11 at 19:09
  • Edited the title. @Javoid - Please correct me if I mis-read your intentions.
    – Iszi
    Apr 13 '11 at 19:48
  • The title is now more accurate, thank you. It doesn't have to be SecureId, but I'd like to see a hardware dongle style authorization, or similar. Apr 13 '11 at 19:50
2

You could roll your own easily for cheap or free using Amazon's micro EC2 instances (http://aws.amazon.com/free) and our free two-factor auth from Duo (http://duosecurity.com) - either SSH-tunnelled (e.g. ssh -D 1080 my.ec2.host and set your local SOCKS proxy configuration to localhost:1080), or else using OpenVPN, etc.

0

I don't know of any that autenticate independently, but there are many that will authenticate against a SecurID authentication server. PIX appliances, for example, support this. Try http://www.google.com/search?q=cisco+securid+vpn

1
  • Thanks but I'm looking more for a service that provides VPN for x dollars a month, that also uses SecurId verification. Apr 13 '11 at 18:33
0

They don't provide the VPN itself so not sure if this is quite what you're after but Signify offer a hosted RSA SecurID service. They send you a token and you configure your VPN gateway to talk, over t'Internet to their RADIUS servers for authentication. Pricing is reasonable iirc.

2
  • Unfortunately, I need the service as well. I don't want to create my own VPN. I'm surprised it's so difficult to find a two-factor authentication VPN service for consumers or small businesses. Apr 13 '11 at 21:05
  • 1
    @Javoid - it's because VPN services for big businesses are very profitable, so they pay back the relatively high initial costs quickly. For small businesses the initial costs aren't that much cheaper, but they need to charge a higher per-user cost to make it pay back.
    – Rory Alsop
    Apr 13 '11 at 21:43
0

Hamachi employs two factor authentication - they describe a public-private key pair in their security white paper. Combined with the required network password you have a two factor consumer VPN solution (although neither of the factors is a token and a shared password's reliability decreases the more people that know it).

As an alternative you could look at a hosted openVPN solution such as dotBlock's openVPN stack; with full console access you could install WikID.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.