Show Posts
1
HFS ~ HTTP File Server / Any way to integrate 2FA service (Duo Security)?
« on: April 15, 2019, 01:21:56 PM »
Hello everyone, I'm a long-time user and lurker but never posted here before, greetings 
I'm running HFS on a Windows server and at the moment, I shut it down when not in use because of all the attempts from hackers to either exploit or brute-force the server. I recently discovered Duo Security for protecting my server from unwanted RDP logon attempts and by adding this, I can block access completely from all foreign countries, restrict logons to only use a specfic username and once correct credentials are entered, a 2FA prompt on my phone must be approved. It's made me a lot more confident leaving RDP enabled all the time on my server.
Now, what I'm getting to, I noticed Duo also have a Web API which would be amazing if it were integrated into HFS, is this possible at all?
This is Duo Security: www [dot] duo [dot] com (sorry, I'm not allowed to post links!)
and here is the documentation for integrating it into webapps: [https] ://duo.com [slash] docs [slash] duoweb
Not being a coder, almost all of that is over my head but I'm hoping some clever person here understands it. Thanks!
I'm running HFS on a Windows server and at the moment, I shut it down when not in use because of all the attempts from hackers to either exploit or brute-force the server. I recently discovered Duo Security for protecting my server from unwanted RDP logon attempts and by adding this, I can block access completely from all foreign countries, restrict logons to only use a specfic username and once correct credentials are entered, a 2FA prompt on my phone must be approved. It's made me a lot more confident leaving RDP enabled all the time on my server.
Now, what I'm getting to, I noticed Duo also have a Web API which would be amazing if it were integrated into HFS, is this possible at all?
This is Duo Security: www [dot] duo [dot] com (sorry, I'm not allowed to post links!)
and here is the documentation for integrating it into webapps: [https] ://duo.com [slash] docs [slash] duoweb
Not being a coder, almost all of that is over my head but I'm hoping some clever person here understands it. Thanks!