Posts

Showing posts from 2017

Mail Recover Center (MRC) in Atlanta, GA

If the post office ever looses your package, God help you.
My $400 video card has been lost for 3 months.
In that time, they can still track it, but they seem to be too stupid to use the tracking number to figure out how to return it to the sender (me).
If you find the dead links on USPS that point to this internal only site:
http://blue.usps.gov/purchase/assetmgnt/am_mrc_welcome.htm (This link is no good outside of the USPS network)

You can instead fill out the form at the actual site I found after a month of searching:
This is the site for the Mail Recover Center (MRC) in Atlanta, GA
https://amps.usps.gov/mpsa/lst I don't know why they make it so hard to find.

How to setup Google Authenticator 2FA with a Watchguard SSL VPN Client for FREE!

Image
My goal for the last year has been to figure out how to turn on 2FA (two factor authentication) for our WatchGuard SSL VPN Clients.  I found that Wright SMS2 worked best, so that is what I will document here.  Most of what I talk about here may also apply to other firewalls too.




The WatchGuard firewall supports 2FA with the Mobile VPN for SSL client, but your Radius server has to do the work.  You can find details about the WatchGuard support here.

So what are the options for getting Google Authenticator to work with WatchGuard for free?

OpenVPN - This was complicated to setup and would have to replace the WatchGuard VPN.  I had too many problems getting this to work and setup was complicated for the users who would have to remove the WatchGuard VPN and install the OpenVPN client.

FreeRadius - This sounded promising, but the Google Authenticator plugin was not well documented and I gave up getting it to support both Active Directory and Google Authenticator at the same time.  It seems tha…