Password is Not Enough, Secure Your VPN.

Stop cyber threats with Two-Factor Authentication (2FA/MFA) that works over Radius protocol, fully compatible with Palo Alto Networks and Fortigate firewalls.

No SMS? Switch to Authenticator.

Don't limit users to a single method. With 'Smart Switch', users can easily switch to Mobile App (TOTP) mode from the password field during SMS issues.

DETAILS

Plug-and-Play with Standard Radius

Nascella MFA requires no complex integration. It connects as a standard Radius Server (UDP 1812) to any firewall including Fortigate and Palo Alto. It automatically recognizes users/groups by talking to your existing Active Directory.

FEATURED

Two Methods in One: SMS and Authenticator

Some users prefer SMS (OTP), others Authenticator (TOTP). With Nascella, enable both. Even if SMS is default, users can enter a specific value in the password field to switch to Authenticator mode instantly.

DETAILS

Shield Against Brute-Force Attacks

VPN gateways are primary targets. Nascella MFA monitors abnormal attempts. It automatically blocks the IP or User for a specific time when the threshold of failed attempts is exceeded.

FEATURED

Your Data Stays On-Premise

Unlike cloud-based MFA solutions, Nascella MFA runs entirely on your servers. Active Directory passwords or token data are never sent to a 3rd party cloud provider.

Technical Details & Management

Advanced features to streamline your MFA processes.

GlobalProtect Customization

Customize pop-up and notification messages for Palo Alto GlobalProtect users according to your corporate language.

MFA Bypass (Whitelist)

Define password-only access for VIP users or specific secure IP addresses by removing the MFA requirement.

Detailed Debug & Log

Monitor authentication flow, Radius packets, and error reasons instantly via the web interface.

Automated Notifications

Instant email alerts to both user and system admin on successful/failed attempts or blocked attacks.

System Requirements

Operating System

Windows Server 2016+
Windows 11

Integration

Active Directory (LDAP)
Read Permission

Database

Local DB or
SQL Server

Communication

SMTP / SMS API

Security

SSL Certificate
(Web Interface)

Request Trial

OUR MISSION

To provide pinpoint solutions to the challenges faced by System and Network administrators, driven by our field experience. With our privacy-first architecture, we transform technology from chaos into a strategic power.

Products

Kazimdirik Mah. 296/1 Sok. No:9 D:208, Bornova, Izmir, Turkiye · +90 232 332 0618

v1.0.0.35