Case Study · Financial Services
A secure virtual private network (VPN) with multi-factor authentication for mobile app testing
Lantrasoft implemented a virtual private network (VPN) and multi-factor authentication (MFA) solution for a financial services customer, creating a secure platform for mobile application testing while repurposing existing infrastructure instead of adding new spend.
Discuss a security access challengeCustomer overview
A U.S. financial services provider with a large technology estate spanning multiple business lines, supported by development, DevOps, testing, integration teams, and vendors.
Business requirement
- Secure platform for application testing using mobile devices — primarily for performance testing of in-house developed, business-critical applications
- Enable additional authentication mechanisms to meet security requirements
- Leverage existing infrastructure resources/appliances for this requirement to avoid additional spend on IT infrastructure
Our solution
Secure VPN with MFA
Design and host a secure Virtual Private Network with Multi-factor Authentication.
Controlled device access
Allow authorized devices to gain access to the application with pre-defined security settings.
Approach & workflow
Gateway connection
User connects to the NetScaler Gateway Virtual IP and is presented with a login page for username and password.
Primary authentication
nFactor Authentication was adopted so LDAP or AD-based authentication is performed at the backend as the primary factor.
Multi-factor authentication
If successful, the user is presented with MFA as the second level of authentication, using NetScaler VPN Gateway with an Authentication Vserver integrated with LDAP and Radius Server.
EPA device scan
An EPA scan is performed against the user's device settings, associated with EPA Scan Policies, before access is granted.
Access granted
Devices that successfully pass both authentication levels gain access to the internal resources needed for testing.
Results achieved
Secure mobile testing enabled
The Quality Assurance team was able to successfully test the application using the secure platform via mobile devices.
Improved security
Improved security using MFA with Citrix NetScaler features.
Cost optimization
Instead of additional spend on security software with end-user licenses, the existing NetScaler appliance and its features were repurposed — nFactor, pre-check and post-check authentication policies, and Session policy with NetScaler Gateway Vserver — to create the VPN with MFA.
IT administration efficiency
All users' authentication, authorization, auditing and administration are managed within a unified gateway solution.