However, management within the company would like to see if we could get two-step authentication enabled for this (where users then have to put in a different password).
We had a similar set-up before with IPCop and OpenVPN where we had to set-up the client to net certificates with a separate VPN password. Is this possible in the Sophos?
The only downside I had with that was it was a bit of hassle to actually make the certificates and regenerate them for each user.
Does Sophos offer a better solution?
Any help with this would be appreciated.