Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 1 reply
  • Subscribers 27 subscribers
  • Views 6927 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Compatible hardware tokens for the XG

svk253

Long story short, we have a user with an outdated phone that they refuse to upgrade, but still want access to our SSL VPN with OTP. Can't get the sophos authenticator or Google authenticator. They are the type that would still have a flip phone if they could.

Anyway, I have been asked to see if we could order a compatible hardware token, and if so how to add it?

Google comes up some stuff, but I can't seem to string together the right words to find a list of compatible tokens. Do you know if we can use pretty much any TOTP hardware token? Is there a recommended one to use?

I also can't seem to find a way to add seed files or key files to the XG for a couple of existing tokens we do have. Do you have any suggestions?

Thanks for your help.



This thread was automatically locked due to age.
  • +1

    Updated - Sep 9th, 2022

    Hey  

    You should be able to use any TOTP hardware token, I would advise to inquire with your Sophos Partner for any suggestions.

    You would create a manual OTP token object, and input your hardware token's secret (in hexadecimal format).

    Currently, we only support time-based OTP (TOTP) where the token increments the code on a regular time period.

    All the TOTP token are stored using SFOS's secure storage mechanism which uses SHA-256 encryption to ensure that token seeds stored on the Firewall are protected.

    I'll provide the links for instructions to reference during your setup:

    More info on setting up 2FA for VPN access:

    Regards,