You can enable certificate based authentication with the Cisco products, not sure about onetime RSA keychains and the like. I would assume there's a way since this is a very common requirement. ----- Original Message ----- From: "Andrew Hodgson" <andrew@hodgsonfamily.org> To: "Troy Hergert" <t.hergert@badgerassoc.org>; "Blind sysadmins list" <blind-sysadmins@lists.hodgsonfamily.org> Sent: Monday, May 03, 2010 2:42 PM Subject: Re: [Blind-sysadmins] VPN connection before login Hi, Yes on Cisco Anyconnect and the earlier VPN clients at least this is an option. Moving forward a stage, is there any way to do this using one-time passwords (using RSA fobs or such)? Thanks. Andrew. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Troy Hergert Sent: 03 May 2010 21:41 To: Blind system administrators Subject: [Blind-sysadmins] VPN connection before login Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

There are RSA onetime generators that can run under your PC so work at least should be covered. You can read the 6 digit code and punch it in directly. I believe enigma logic or someone similar makes such a beast. I think your bank is going to go biometric first before they have people carrying around expensive keychains. ----- Original Message ----- From: "Brent Harding" <bharding@doorpi.net> To: "Blind sysadmins list" <blind-sysadmins@lists.hodgsonfamily.org> Sent: Monday, May 03, 2010 5:06 PM Subject: Re: [Blind-sysadmins] VPN connection before login I wonder how a blind person would use one of these key fob things anyways? I'm sure they're coming to online banking eventually as well. Will these things really lead to less employment available for blind people because it could give companies a simple way to be incompatible with anything we can do. I know Paypal is promoting these things, but we don't have the option. These days, I'm not sure how secure the sms alternative Paypal has is, but not every company can set up a short code for doing this. If your cell signal is bad, well, then maybe it may take a long time for that message to come, if it does. ----- Original Message ----- From: "Scott Granados" <scott@granados-llc.net> To: "Blind sysadmins list" <blind-sysadmins@lists.hodgsonfamily.org>; "Troy Hergert" <t.hergert@badgerassoc.org> Sent: Monday, May 03, 2010 4:45 PM Subject: Re: [Blind-sysadmins] VPN connection before login

You can enable certificate based authentication with the Cisco products, not sure about onetime RSA keychains and the like. I would assume there's a way since this is a very common requirement.

----- Original Message ----- From: "Andrew Hodgson" <andrew@hodgsonfamily.org> To: "Troy Hergert" <t.hergert@badgerassoc.org>; "Blind sysadmins list" <blind-sysadmins@lists.hodgsonfamily.org> Sent: Monday, May 03, 2010 2:42 PM Subject: Re: [Blind-sysadmins] VPN connection before login

Hi,

Yes on Cisco Anyconnect and the earlier VPN clients at least this is an option. Moving forward a stage, is there any way to do this using one-time passwords (using RSA fobs or such)?

Thanks. Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Troy Hergert Sent: 03 May 2010 21:41 To: Blind system administrators Subject: [Blind-sysadmins] VPN connection before login

Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

Andrew: Do you know how difficult this is to do with Anyconnects? That's what we use, and unless the option has to be set by the VPN administrator I've never seen it. I'd love to know though, it'd be a big help for remote users around password change time. Ryan -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Monday, May 03, 2010 3:42 PM To: Troy Hergert; Blind sysadmins list Subject: Re: [Blind-sysadmins] VPN connection before login Hi, Yes on Cisco Anyconnect and the earlier VPN clients at least this is an option. Moving forward a stage, is there any way to do this using one-time passwords (using RSA fobs or such)? Thanks. Andrew. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Troy Hergert Sent: 03 May 2010 21:41 To: Blind system administrators Subject: [Blind-sysadmins] VPN connection before login Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins

Hi, Here is the link I got from my bookmarks: http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect22/... Actually after reading this a bit more with the RSA administrator guide I think I can see a way of enabling this alongside the RSA security tokens. We are a long way from that though, as we haven't moved over to ASA hardware yet. I may look at doing this at home if I am sufficiently bored. Andrew. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Ryan Shugart Sent: 04 May 2010 00:55 To: Blind sysadmins list Subject: Re: [Blind-sysadmins] VPN connection before login Andrew: Do you know how difficult this is to do with Anyconnects? That's what we use, and unless the option has to be set by the VPN administrator I've never seen it. I'd love to know though, it'd be a big help for remote users around password change time. Ryan -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Monday, May 03, 2010 3:42 PM To: Troy Hergert; Blind sysadmins list Subject: Re: [Blind-sysadmins] VPN connection before login Hi, Yes on Cisco Anyconnect and the earlier VPN clients at least this is an option. Moving forward a stage, is there any way to do this using one-time passwords (using RSA fobs or such)? Thanks. Andrew. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Troy Hergert Sent: 03 May 2010 21:41 To: Blind system administrators Subject: [Blind-sysadmins] VPN connection before login Is there a way to have a Windows XP machine which logs into a Server 2003 domain, first connect to a VPN before the login to Windows, or at the same time? Thanks. Troy _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/mailman/listinfo/blind-sysadmins -- 98% of our clients would recommend us Client Survey Jan 2010 Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88. © 2009 - 2010 allpay Limited Fully compliant with the Payment Card Industry Data Security Standard (PCI DSS) Telephone: 0844 225 5729 Fax: 0844 557 8350 Website: www.allpay.net Email: enquiries@allpay.net This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom it is addressed. If you have received this email in error please notify the allpay Information Security Manager at the number above