I'm wondering if it's possible to setup a VPN authentication to Cisco asa firewall by using gmail account? Each time me or any of my users want to use VPN we could use our gmail credentials and it would authenticate against google server? Is that possible? Would I need to setup a proxy server to handle this? I'm still thinking about this and I'm not sure if this is doable. If anyone has any experience or knows how and if this could be achieved please share with me you
1 Answer
As others have said, no, this isn't possible. However, you can at least set up your VPN to use 2FA if you want it to be more secure. Duo is what one of our contracts uses to accomplish this for IRS compliance. It's essentially just the Google Authenticator API in a different wrapper, and you generate your OTP on the Duo app on either a computer or phone.
RADIUS
orLDAP
therefor you would need to create your own system for implementing that - how you would go about doing it is not something I can answer. Have you tried Googling this and seeing if anyone else has tried to implement such a thing? I don't believe I've ever seen anyone do that. Why is it necessary for you to have such a thing?