Sonicwall

NPS

Requirements

  • Have a functional Active Directory
  • Have NPS protected by IRONCHIP (NPS tutorial link)
  • Have an MFA application created in the IRONCHIP platform (MFA tutorial link)
  • Ironchip App downloaded

Configuration

The first step is to go to the left menu, and within “System configuration”, enter the “Authentication Servers” section.

Within this section, create a new configuration by clicking on “New”.

Select the “RADIUS (Username/Password)” type

In this tab, enter the corresponding data for your RADIUS server.

  • Descriptive name for this configuration.
  • IP of your Radius server
  • RADIUS shared secret
  • Match RADIUS groups by: filter ID 11
  • Time out at 60 seconds

Once you have saved the changes, go to the “Security Administration” section, and create a new entry in the “Access Control” section.

Fill in the fields just like in the image, except for the description, which can be personalized.

  • Position: 1 enabled
  • Description: xxxxxxx
  • Action: Permit
  • Direction: User
  • From: Any
  • To: Any

Save the changes.

Finally, create a RADIUS Server that points to the SonicWall IP.

From now on, when you try to log in, select the generated service, enter your user credentials, and accept the Ironchip notification on your phone to enter.

SAML

Requirements

  • Ironchip app downloaded

Configuration

The first step is to go to the left menu, and within “System configuration”, enter the “Authentication Servers” section.

Within this section, create a new configuration by clicking on “New”.

Select “SAML 2.0”

Before continuing, go to the Ironchip identity platform, generate a new SAML type application, and download the metadata file.

With this file already downloaded, go back to SonicWall and upload it in the new configuration generated in SonicWall.

Once imported, export the file that SonicWall has generated.

Copy the content of that file, upload it to a public address, and paste the URL into the metadata URL section of the previously created SAML application.

Add users to this service with the same username as SonicWall, and when authenticating, select the new generated authentication.

A new Ironchip tab will open in which you have to enter your username, and a notification will be sent to the APP.