ZyWALL Series CLI Reference Guide
250
CHAPTER 31
Web Authentication
31.1 Web Authentication Overview
Web authentication intercepts network traffic, according to the authentication policies, until the user
authenticates his or her connection through a specifically designated login web page. This means all
web page requests can initially be redirected to a special web page that requires users to authenticate
their sessions. Once authentication is successful, the user can then connect to the rest of the network or
Internet.
As soon as a user attempt to open a web page, the Zyxel Device reroutes the user’s browser to a web
portal page that prompts the user to log in.
31.1.1 User Two-Factor Authentication
Two-factor authentication adds an extra layer of security for users logging into the Zyxel Device. When
two-factor authentication is enabled, a user has to first enter their username and password, and then
enter a second one-time password when logging in.
Web authentication supports two-factor authentication using Google Authenticator. When enabled,
the web authentication page first prompts the user to enter their username and password (factor 1),
and then prompts them to enter a time-limited code from the Google Authenticator app (factor 2).
Note: It is also possible to configure two-factor authentication for VPN and admin users. For
details, see Section 56.4 on page 482.
Note: The admin two-factor authentication settings override the web authentication two-
factor authentication settings if both are configured.
31.1.1.1 Google Authenticator
The following is a list of specifications and limitations on using Google Authenticator for two-factor
authentication.
• ext-users (external users) are not supported.
• A user must setup Google Authenticator on their mobile device before they can successfully
authenticate with the Zyxel Device.
• Verification code length: 6 digits.
• Maximum verification code failed attempts: 3
• Backup code length: 8 digits
• Google authenticator is supported in device High Availability (HA) mode. The secret keys are
synchronized between all Zyxel Devices.
To Next Page
Loading...
