In the interest of better securing my UTM, I was thinking I might enable One Time Passwords and require them for access to WebAdmin. However, the last thing I want to do is lock myself out if there are problems, so I was wondering what happens if I lose my internet connection. Does OTP work offline, or would I find myself unable to access the UTM if it was unable to verify my code with the OTP provider?
For safety's sake, should I perhaps create a separate admin account without an OTP and put that password in my safe?
It would be nice if there was some way to require an OTP for WebAdmin access from the Internet, but not from my LAN. Perhaps I'll raise that as a suggestion.
This thread was automatically locked due to age.
Guest User!
You are not Sophos Staff.
