This is an older document I wrote regarding multi-factor authentication. By using multi-factor authentication, the user needs to type his password and has a token which generates a passcode. Both methods needs to be specified before the user can logon.
http://www.accessdenied.be/blog/documentation/Configure SafeWord DLA for Windows Server 2008.pdf
I decided to buy a Palo Alto VM series for testing. I already have a PAN-200, but a VM version is useful when you want to perform some testing in a virtual environment. One of the reasons is to create step-by-step guides on how to configure this next-generation firewall.
This document describes how to install the PA-VM into VMware workstation 9:
http://www.accessdenied.be/blog/documentation/Installing the PA 100 VM in VM Workstation 9.pdf