Configuring the Connect Secure appliance
Open your Connect Secure administration console,
in the top menu, select Authentication > Auth. Servers
On the Authentication servers page, at the top of the page select : "RADIUS Server" in the drop down list and click on "New Server..."
On the New RADIUS Server page:
Fill the form with the following information:
(For RADIUS "Push" configuration you have to indicate a 60 seconds timeout with no (0) retries.)
Fill the indication for your first inWebo RADIUS authentication server ex:radius1.myinwebo.com
inWebo Radius server addresses :
-
Primary: radius-a.myinwebo.com (95.131.139.137)
-
Secondary: radius-b.myinwebo.com (217.180.130.59)
(See RADIUS integration and redundancy for additional details and configuration)
It's highly recommended to fill the "Backup Server" information.
Click on "Saves changes"
Creating a new user Realms
In the Users Menu at the top of the window, Select "User Realms" and "New User Realms..."
In the New Authentication Realm form:
Indicates the information and the Authentication name of the inWebo server
Click "Saves changes"
The new Realm appear in the Realms list:
Creating the Private portal
Creating a New URL for your private portal
Select "New URL..."
-
Fill the path of your authentication portal
-
Check "User picks from a list of authentication realms"
-
Select the Realm of your users
Click on "Save Changes"
Configuring inWebo RADIUS connector
In the inWebo Administration Console.
-
Once connected, go to Secure Sites tab > CONNECTORS section.
-
Select “Add a connector of type…”, and choose “Radius” or “Radius Push” :
-
The popup below will appear. Enter the External URL of your Pulse appliance, along with the RADIUS secret you have defined earlier:
-
Click “Add/update”
About ‘Push’ RADIUS mode
If you are using the 'push' radius mode (notification sent to the user's smartphone), the global response time must be long enough to allow the user to authenticate with his smartphone. A "Radius Authentication time" of 60 seconds is recommended.
Additional PULSE SECURE Authentication parameters
Enabling Traffic Control
Select Authentication > Auth Servers
-
Select "Enable Auth Traffic Control"
-
Select "Auth Server level"
-
Indicates "External" or the port names that routes the external Auth Requests