GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Connect » KC 9.4.1 2FA success stories?
KC 9.4.1 2FA success stories? [message #151340] Thu, 24 March 2022 16:20 Go to next message
McIrish is currently offline  McIrish
Messages: 252
Registered: October 2011
Hi,
I'm trying to wrap my head around 2FA in Kerio Connect. I'm hesitant to enable it as I'm not up to speed. I did read doc on it but the info doesn't seem complete to me. I could just start messing with it on a test user but I'd love some feedback from those of you who have implemented it.
1) Did you enable it globally and force it for all users?
2) What steps did you do to train end users on how it works?
3) Any issues you have run into?

For the most part, all of the clients are using Outlook 2016 on both PC and Mac. A few people use the web client, but the vast majority have never logged into the web client.

Thanks for the tips
Re: KC 9.4.1 2FA success stories? [message #151348 is a reply to message #151340] Sat, 26 March 2022 12:23 Go to previous messageGo to next message
ThinkYEAH is currently offline  ThinkYEAH
Messages: 9
Registered: February 2019
I have tested it, but i had to disable because i can't use my email with Microsoft Outlook 2019, maybe there is any way to make it work but i have no idea.
Re: KC 9.4.1 2FA success stories? [message #151687 is a reply to message #151348] Fri, 20 May 2022 20:46 Go to previous messageGo to next message
afisher is currently offline  afisher
Messages: 25
Registered: April 2011
I have it enabled on a few accounts and as expected the google authenticator app on my phone works just fine. For the rest of the work force without company phones, Im suggesting we buy programmable tokens https://deepnetsecurity.com/products/programmable-tokens/ . These are $25USD/ea and can be used for one OTP account each. Another option that works is the Authy desktop software (free) which works just like an smartphone authenticator app but on your desktop. If anyone knows of a better way to do this, i'm all ears.

As for your outlook, you are using the app password that is generated in the webmail right? You can't 2F outlook as far as I know, so you need to use the app password just like you would on your phone.
Re: KC 9.4.1 2FA success stories? [message #151710 is a reply to message #151340] Tue, 24 May 2022 21:53 Go to previous messageGo to next message
McIrish is currently offline  McIrish
Messages: 252
Registered: October 2011
Do I understand correctly the 2FA is only for the Kerio Client and the web portal, but NOT for Outlook or for use on cell phones? I just want to make sure I understand.
Re: KC 9.4.1 2FA success stories? [message #151732 is a reply to message #151710] Thu, 26 May 2022 21:32 Go to previous message
afisher is currently offline  afisher
Messages: 25
Registered: April 2011
Yes, that is exactly how it works.
Previous Topic: Whitelist Certain Domains While Blocking All Others
Next Topic: Calendar invitation - wrong time
Goto Forum:
  


Current Time: Mon Jun 27 05:00:07 CEST 2022

Total time taken to generate the page: 0.03329 seconds