Which Cisco ASA SSL VPN feature provides support for PCI compliance by allowing for the validation of two sets of username and password credentials on the SSL VPN login page?

3 thoughts on “Which Cisco ASA SSL VPN feature provides support for PCI compliance by allowing for the validation of two sets of username and password credentials on the SSL VPN login page?”

1. Correct Answer D

   RSA OTP conforms with PCI

   Reply

   1. Confusing and anoying question!!!
      PCI recomends multi factor authentication:
      – something that you have (otp, usb key, rfid, etc)
      – something that you know (classic static password)
      – something that you are (biometrics)
      RSA/OTP is one time password with RSA encryption, and that is only one factor into the multi factor authentication.

      The question is asking about “two sets of authentication”, and even RSA OTP being a PCI recomendation, it is not “a two sets of authentication”, it’s only something that you have.

      Really confusing question.

      Reply

      1. there goes some references

         https://community.cisco.com/t5/security-documents/anyconnect-vpn-client-faq/ta-p/3117980/page/2

         https://indeed-id.com/en/solution-am-pcidss

         Reply