lukemiller05
Hi all,
I'm having an issue when using two factor authentication with Google Authentication and Duo Mobile.
It all works fine if I leave the web client open on the public net on port 443.
When I disable web client access on the public interface 2FA no longer, the reason i'm doing this is I only want the web client interface available on our intranet.
When I set protocol to UDP only this then breaks 2FA.
I've done a TCPDUMP and it looks like the initial negation tries to take place over 443 even after re-downloading the client.
Its as if 2fa requires the web client to left enabled.
Does anyone know if its possible to use UDP only and ensure 2FA remains working ?
The Johan
Sorry to be the bearer of bad news, but no, I believe that using a web service based function without having the web interface available is not possible.