Cisco FTD1120 configured from FMC email OTP and Anyconnect

Hi All-- wanted to let you know that I was able to fix my problem by reading past posts in the forum, “password-management” option deselect was the key, thanks for all your help!

Dave_Baddorf

Jul '16

Cornelius,
Thanks for your help! After troubleshooting this further I found out
that on the Cisco ASA when the command “password-management” is used then
the RADIUS requests to FreeRADIUS must be using MS-CHAP instead of PAP.
Once I removed that “password-management” command I was able to use
two-factor authentication for the ASA VPN’s, through FreeRADIUS to
PrivacyIDEA.
I appreciate your great product!
DaveOn Thursday, July 21, 2016 at 4:29:07 PM UTC-4, Cornelius Kölbel wrote:

2 Likes