No specific questions in this instruction, please proofread and make any comments.

This article describes how to protect the Hybrid Access Gateway administrator's web interface with two-factor authentication (2FA).

Prerequisites

A user group with access to the web resource (the Hybrid Access Gateway administrator's web interface) must exist. For information how to create a user group, see Add user group.
The administrators that shall have access to the HAG web interface have been added to the user group. For information how to add a user to a user group, see Add user account.

Step by step instruction

Create 2FA access rule

In the Hybrid Access Gateway administration interface, go to Manage Resource Access.
Click Access Rules > Add Access Rule...
Enter a display name and click Add Rule...
Example: Display Name

myAdministratorsAccessRule
Select type of access rule. In this case, select Authentication method and click Next.
Select and add the authentication methods that shall be used for 2FA.

The selected access rules are used for authorization in the order they are selected.
Specify that the authentication methods shall be combined with a logical AND and click Next.
Confirm the access rule creation. Click Next.
Click Next again and then click Finish.

Add standard web resource for Hybrid Access Gateway Admin web resource

In the Hybrid Access Gateway administration interface, go to Manage Resource Access.
Click Standard Resources.
Expand Hybrid Access Gateway Resources.
Click Secure Remote Access to Administration Interface.
Click Add this Standard Resource.
Enter values in the form, click the ?-sign for more help.
Example: Values for standard web resource

Display Name: HAG Admin
Description: Administrator's interface for Hybrid Access Gateway
Host: 10.75.112.20
HTTP port: 80
Click Next.