This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM 9.2 with SafeNet eToken

Hi,
we are using a Sophos UTM 120 with Software 9.2 installed.
Now I've bought hardware otp token - SafeNet eToken.
I've created a new otp manually with the secret-code witch SafeNet send me on a CD.

Now I will try to connect with the token but the connection will not establish.

Could someone give me a tip where the problem could be?

Thank you.

Best regards.
piwi

This thread was automatically locked due to age.

0 quasar3c279 over 10 years ago

Maybe your Tokens are out of sync. Starting with 9.202 it's possible to resync hardware tokens, if they are too many steps away from your UTM clock.

Regards, Mario
Cancel
Vote Up 0 Vote Down

Cancel
0 piwi over 10 years ago in reply to quasar3c279

Hi Mario,
thanks for your reply. I've installed Software 9.03-3 on our UTM.
But i can't find a possibility to resync the token. Do you know where i can find it?

UTM.jpg

Thanks
Philipp
- UTM.jpg
- View
- Hide
Cancel
Vote Up 0 Vote Down

Cancel
0 quasar3c279 over 10 years ago in reply to piwi

Please just try a new OTP Auth, there should be a clock before the Info-Icon. There you can see the current offset of the token and enter a pin for resync.

Maybe I can do a screenshot tomorrow.

Good night! [;)]
Cancel
Vote Up 0 Vote Down

Cancel
0 firebear_01 over 10 years ago in reply to piwi

Hi PIWI,
in Userportal -> Definitions & Users -> Authentication Services -> One-time Password.
In the Line where the OTP Token is shown, you should see a Clock Symbol on the right (in Version 9.202-33 is it there).
If you click it, you get a Dialog with an Input Field for the actual Tokencode seen in the Display of your Token.
The UTM builds the starting Offset out of your Input.

greets
Firebear
Cancel
Vote Up 0 Vote Down

Cancel
0 piwi over 10 years ago

Hi,

i have removed the OTP Token and imported the Secret-Key again.
But a Clock Symbol isn't shown on the right side.
Thanks in advance for further help.

Philipp
Cancel
Vote Up 0 Vote Down

Cancel
0 piwi over 10 years ago

Hi,
now I've got the clock. I will try to resync the token and give an feedback.
Philipp
Cancel
Vote Up 0 Vote Down

Cancel
0 piwi over 10 years ago

Hi, I've resynced my token now. But I can't connect.
So I did another resync an I get the following error message.

"Could not find the passcode. Either the token's time is too far off or the passcode is wrong."

Any ideas?

Thanks.

Best regards

Philipp
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 10 years ago

Hi,

Are the clocks right on both the firewall and the token device?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 piwi over 10 years ago in reply to BarryG

Hi Berry,

the clock is right on the firewall.
But i can't/don't know how to check it on the "SafeNet eToken pass"
The secret-key is correct too.

otp_timeoffset.jpg

Philipp
Cancel
Vote Up 0 Vote Down

Cancel
0 KrzysztofRaczynski over 9 years ago

Hey Piwi, did it work with your Safenet etoken finally?
Cancel
Vote Up 0 Vote Down

Cancel