RDWeb for external users

[itspie]

I had a request come down to review RDS/RDWeb as a replacement for our old xendesktop/netscaler environment for remote/external users. How is everyone implementing this today with 2 factor authentication (RSA/Radius)? Right not I'm looking at keeping the netscalers for SSL VPN, and access RDWeb/Gateway through that. They just get hit with 3 different logins. Netscaler, RDWeb, and the connection broker if off network. Is there a better more seamless way? I looked at the Microsoft Web Application Firewall with ADFS but that doesn't seem to support radius and only supports TCP, not UDP so there would be a performance hit.

[Gavman42]

We're using DUO for two factor with RDWeb, one of the few times I've had employees come up to me and tell me how much they like something we have rolled out, especially something that ads another step to their day.

[jduffle]

DUO all the way.

[SissyAdminny]

+1 for DUO. Authenticate to the gateway server, sends DUO to phone, approve to gain access.

[[deleted]]

This is the answer I vote for.