SonicWall

This guide explains how to protect SonicWall with Ironchip over RADIUS through NPS or over SAML.

RADIUS with NPS

Requirements

• A functional Active Directory.
• NPS protected by Ironchip. See Microsoft NPS.
• An MFA application created in the Ironchip admin console.
• The Ironchip app downloaded.

Configure SonicWall

1. In the left menu, under System Configuration, go to Authentication Servers.

   

2. Click New to create a configuration.

   

3. Select the RADIUS (Username/Password) type.

   

4. Enter the details of your RADIUS server:

   • Name: a descriptive name for the configuration.
   • Primary RADIUS server: the IP of your RADIUS server. Click Test to check that SonicWall can reach the server.
   • Shared secret: the RADIUS shared secret.
   • Match RADIUS groups by: the Filter-ID attribute (11), which appears as filterid attribute in the drop-down list.
   • Timeout: 60 seconds.

   

5. Save the changes, go to Security Administration, and create a new entry in Access Control.

   

6. Fill in the fields as shown in the image. The description can be anything you like:

   • Position: 1, with Enabled selected.
   • Description: any text you prefer.
   • Action: Permit.
   • Direction: User.
   • From: Any user.
   • To: Any resource.

7. Save the changes.

   

8. Finally, in NPS (Network Policy Server), create a RADIUS client that points to the SonicWall IP.

   

Verify the integration

When you sign in to SonicWall Workplace, select the authentication server you created in Log in to, enter your user credentials, and accept the Ironchip notification on your phone to sign in.

SAML

Requirements

• Access to the Ironchip admin console.
• The Ironchip app downloaded.

Configure SonicWall

1. In the left menu, under System Configuration, go to Authentication Servers.

   

2. Click New to create a configuration.

   

3. Select SAML 2.0.

   

Exchange metadata with Ironchip

1. Before continuing, go to the Ironchip admin console, create a SAML application, and download the metadata file.

   

2. Go back to SonicWall and upload the file in the new configuration.

   

3. Once imported, export the file that SonicWall generated.

   

4. Copy the content of that file, upload it to a public address, and paste the URL in the Metadata URL field of the SAML application you created.

   

5. Give users access to this application, with the same username as in SonicWall.

Note

In the current version of the console, the SAML application has the Service Provider (SP) section with the SP Metadata field, which accepts URL, Text and File. Select File, choose the exported file and click Import: you do not need to upload it to a public address.

Verify the integration

When you sign in to SonicWall Workplace, select the SAML authentication server you created in Log in to.

A new Ironchip tab opens where you enter your username. A notification is sent to the app.