The hardware and software used in this integration include: This diagram shows the test topology for this integration:

The Authentication Proxy receives a secondary authentication result from the Duo Security service.The Duo Security service completes the secondary authentication.The Authentication Proxy establishes a secure connection with the Duo Security service.The Authentication Proxy completes primary authentication using RADIUS.The Firebox sends an authentication request to the Duo Security Authentication Proxy.A user initiates primary authentication to the WatchGuard Firebox.This is the workflow for two-factor authentication with Duo Security: Bind the User with the Duo Mobile Application.Configure the Duo Authentication Proxy to Work with the Firebox.Configure the Duo Authentication Proxy for Primary Authentication.Sync Users to Duo from Active Directory.Duo Security and Firebox Integration Overview.Duo Security Authentication Integration Guide.For information about how to integrate Duo Security RADIUS Authentication without an NPS server, go to the Duo Security RADIUS Authentication Integration Guide Contents

This integration uses an existing NPS server installed on a domain controller that also contains the Duo Security Authentication Proxy. This document describes the steps to integrate WatchGuard Mobile VPN with SSL client software download access and Mobile VPN with SSL client authentication with Duo Security’s® two-factor authentication solution. Duo Security Authentication Integration Guide Duo Security and Firebox Integration Overview

Duo mobile app a proxy