May I know what 2FA authentication solution you guys recommended where we can run either Google authenticator or Microsoft Authenticator to get the 2FA pin code.
Thank You
Stanley
orbit1234
10
Re: 2FA Authentication
Hi,
we're in need of something here too. I think 2 Factor auth might come in future but don't know when that might be.
I've asked support but thing we really need is some kind of basic account lockout if someone tries to brute force a password. We can close off the web interface to protect it for now. Bit worried there is no security on this.
Comment
nattivillin
1146
Re: 2FA Authentication
You'll get mostly silence from commit on this issue. They have recommended some convoluted IIS security method you can try that SOMEONE ELSE came up with. Commit doesn't even provide basic lockout alerts.
Comment
Support Team
7552
Re: 2FA Authentication
2FA is coming!
True, for secure connections use IIS as the Web server for RangerMSP together with SSL certificates.
Hope this helps.
Comment
nattivillin
1146
Re: 2FA Authentication
We use both of those. That still leaves protection from a dictionary attack.
Basic account lockouts when wrong password entered X amount of times would go very far in providing additional and easy security.
Comment
Stanley Ng
89
Re: 2FA Authentication
We're using both IIS & SSL as well.
I still felt with 2FA will generally helps against brute force attack especially quite a lot of hackers target MSP nowadays.
Comment
scoplin
86
Re: 2FA Authentication
We have implemented 2FA across all of our platforms that support it (RMM, Screenconnect, O365) and CommitCRM is the last one on our list.
Glad to know it's coming. Is there any rough ETA for it on the roadmap?
Comment
Support Team
7552
Re: 2FA Authentication
Thanks. A non-official answer would be - hopefully in our next release this summer.
Comment
LFITServices
41
Re: 2FA Authentication
Use a WAF and only allow outside access from it. This will provide the security you need.
Comment
AN-Tech
478
Re: 2FA Authentication
Where are things at with 2FA?
Comment
Support Team
7552
Re: 2FA Authentication
You can enable 2FA by visiting Tools > Options > Web Interface (Admin) tab in RangerMSP.
Comment