We preach two factor authentication whenever we can!
Previously ths cost of this has been pretty expensive for Customers due to the Labour of performing the following
- Setup of a DMZ on your Network
- Creation of a New Subnet
- Firewalls Rules between on premise and DMZ
- Setup of MFA Software
- Purchase of Licenses
- Setup of MFA Application on Users Phone
However what if a customer already has office 365 ? They can enable 2fa authenticaiton with their 365 Tenant for free and outsource this setup and security to Microsoft.
To do this you just need a machine to be able to accept the SAML Tokens and Citrix's Netscaler does just this!
Not only can you toughen up the security to your inhouse and hosted apps but you can also restrict access by Enabling Country of Origin in a Conditions in Conditional Access Policies in Active Directory and SAML