Is it possible to use Stormshield Firewall VPN feature with Azure AD MFA?

Question

We are looking to setup additional security for connecting our users to our VPN by implementing Azure AD MFA.
We have a Stormshield firewall acting as a VPN server.
We would like the users to be prompted by MFA to connect to the VPN.
Is there a way to achieve that`?

I've found the following article, but it doesn't cut it: https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfaserver-dir-radius

And the following article doesn't list Stormshield: https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfaserver-nps-vpn

Any help is welcome.

Thanks.
Dom

Answer 1

Hi @Anonymous • Thank you for reaching out.

The documents you are referring to are for Azure MFA Server (installed on a Windows Server OS ), which is deprecated and not available for new setups. You need to use Azure MFA Service (hosted in Azure Cloud) with your VPN solution, which must be using a central RADIUS server.

You must meet the below pre-requisites to use Azure MFA:

• Network Policy and Access Services role
• Azure AD Multi-Factor Authentication license
• Windows Server software with NPS and NPS extension installed.
• Azure Active Directory (Azure AD) synced with on-premises Active Directory

If your environment meets the above pre-requisites, please follow the instruction provided here: https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension-vpn

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.