Hi, our remote access vpn works pretty well but our users are passive abusers, leaving usernames and passwords around, and laptops have been stolen recently. I'd like to augment our remote access ssl vpn (Cisco) with a 2-factor solution so that people would have to lose more than just their pc for the bad guys to get in. I like the phone-based solutions that are becoming more popular. Anyone have any experience with these?

Hi Kanchana,

Welcome to GSF, I hope you enjoy your time here.

Unfortunately I have no experience with phone authentication, hopefully one of our more experienced staff should be able to answer your question.

However from what I understand some phone solutions may be more secure, as some packages include biometric voice identification and other features that may provide more security than a hardware solution, especially if they often loose passwords as those hardware authenticators can be lost aswell. However from my research hardware solutions are cheaper and easier to implement. One that I have seen commonly used is this hardware authenticator key.

Maybe you should have a read of this topic here. Which is on a similar line to your question.

Have a great day
Nebon

Phone Factor has free versions that are very useful, enables near-ubiquitous 2-factor authentication without deployment of hardware or client-side software and immediate fraud detection. So I would have to say it's cheaper than a time consuming and potentially costly hardware deployment.