Ipak Yo’li Bank is one of the leading commercial banks in Uzbekistan, offering a wide range of financial services. The bank is actively expanding its digital infrastructure, with a strong focus on data security, 2FA, and protecting its clients’ information. We chose Protectimus for several key reasons. First, it allows us to host the MFA server on our premises, a crucial requirement for both our information security and legal departments. Secondly, it provides comprehensive multi-factor authentication coverage for all entry points to our corporate banking infrastructure, all from a single provider. Thirdly, the option to purchase a lifetime license for Protectimus MFA software has allowed us to secure access to our employees’ accounts for the long term. The implementation process was smooth, thanks to the excellent support provided by the Protectimus team at every stage. We primarily use MFA for Windows accounts and RDP connections, and the software has proven easy to install, configure, and use for our employees. Additionally, we’ve successfully used RADIUS integration, and as our infrastructure grows, we plan to expand our use of Protectimus integrations. We highly recommend Protectimus as a customer-oriented MFA provider with reliable products and a supportive team. Information Security Director at Ipak Yo’li Bank Key tasks for implementing 2FA for Ipak Yo’li Bank The administrators of the Ipak Yo’li Bank set the following tasks for the two-factor authentication (2FA) provider To secure employee account access when connecting via Windows and RDP. To implement multi-factor authentication for all entry points to the bank’s infrastructure. To utilize an in-house multi-factor authentication server for enhanced security. To ensure long-term protection by purchasing a lifetime license for the MFA solution. The following Protectimus 2FA products were chosen to solve the above mentioned tasks Protectimus On-Premise Platform – an on-site two-factor authentication platform (a lifetime license was purchased for its use); Protectimus Winlogon & RDP – a solution designed to secure Windows accounts, both locally and through RDP connections; Protectimus RADIUS – a component that integrates with any software or hardware supporting RADIUS authentication; Protectimus Smart – an MFA app for generating one-time passwords, available on iOS and Android. Protectimus Two – hardware TOTP tokens for generating one-time passwords. Challenges and Solutions Securing Windows Accounts and RDP The Protectimus Winlogon & RDP multi-factor authentication solution was successfully implemented to safeguard employee account access. This helped prevent unauthorized access and strengthened the security of the bank’s infrastructure. The Protectimus two-factor authentication solution for Windows and RDP protects both local accounts and remote desktops (RDP). It is simple to deploy across multiple computers using GPO and supports automatic registration of users and tokens, making it ideal for corporate environments. It also functions in offline mode on local desktops. RADIUS integration The Protectimus RADIUS component enabled seamless integration of Protectimus multi-factor authentication with the bank’s existing infrastructure, allowing the Protectimus MFA server to connect with any software or hardware that supports RADIUS authentication. This ensured protection for all critical entry points. Lifetime license for the Protectimus On-Premise Two-Factor Authentication Platform For Ipak Yo’li Bank, ensuring maximum data protection was a top priority. Deploying an on-premise 2FA platform on their own servers proved to be the best solution. This approach avoided sharing user data with third parties, guaranteeing security and system reliability. By purchasing a lifetime license for the Protectimus On-Premise Two-Factor Authentication Platform, the bank ensured long-term protection while reducing system maintenance costs. Efficient integration of hardware TOTP tokens and 2FA App Bank employees swiftly adopted the Protectimus SMART two-factor authentication app and Protectimus TWO hardware tokens for generating one-time passwords. Offering a choice between various token types enhances user convenience and flexibility in the authentication process. 2FA products...