DennisK.22205 (Customer) asked a question.
Cisco Firepower VPN + Okta + Duo/Okta Verify MFA
We were trying to add MFA to our VPN. We use Cisco Firepower VPN and users use Cisco Secure Client (AnyConnect) to access VPN. All users are authenticated through Okta and we use Duo (Okta Verify) as MFA.
We did encounter a timeout issue when doing MFA. Even though we changed the timeout value in our VPN settings (60s, 180s and so on), users are still stuck with a 10-12 second timeout after they choose Duo Push or Okta Verify Push for authentication.
Do you have a solution for this? We tried this link: https://help.duo.com/s/article/1146?language=en_US and also edit local profile (which seems to get overwritten) but doesn't seem to work.
Thanks.
Hi @DennisK.22205 (Customer) , Thank you for reaching out to the Okta Community!
The Okta Radius agent usually comes with a timeout of 60 seconds in the config.properties file for the Okta verify MFA option the value will be 30 seconds:
See: https://help.okta.com/oie/en-us/Content/Topics/integrations/Agent_install_windows-config.htm
Check C:\Program Files (x86)\Okta\Okta RADIUS Agent\current\user\config\radius\config.properties and confirm that the ragent.total.request.timeout.millisecond value is set to default 60000(ms) .
While looking into this issue I've also noticed that you've already opened a Support ticket.
The Okta Community Questions forum isn't really meant for in-depth troubleshooting.
If you already have a Support ticket open, then I recommend continuing the discussion with the assigned Technical Support Engineers. They'll be able to access additional tools and resources to help you get to the bottom of it. Once it's sorted, please consider dropping the solution here as well for other members of the Community that might be facing the same.
Have a great rest of the day!
--------------------------------
Watch and Learn: New Okta how-to videos, plus what's new this month in the May newsletter.