Additional Authentication fails when Sonicwall Firewall is integrated with RSA SecurID Access Identity Router RADIUS Server
Originally Published: 2019-08-12
Last Modified: 2023-09-22
Article Number
000041156
Applies To
RSA Product Set:  SecurID Access Cloud Authentication Service
RSA Product/Service Type:  Identity Router RADIUS
Issue
When a Sonicwall Firewall is integrated with the IDR RADIUS server, the IDR successfully authenticates LDAP password but always rejects additional authentication.  
The Cloud Authentication Service Administration Console User Event Monitor shows "LDAP password authentication succeeded" followed by an unexpected:

LDAP password authentication failed - Logon failure:  unknown username or invalid password
 
Cause
This is a software defect in the Sonicwall Firewall.
Resolution
Upgrade the Sonicwall to version 6.5.3 or later.