I have a client who wants the cheapest 2FA solution that is supported by SA series. Anyone with a suggestion? I'd really appreciate.
Have a look at Swivel Secure suing the turing image. www.swivelsecure.com
It's far cheaper than most out there, and integrates well.
Not sure of price, but check out SecureAuth tokenless - http://www.gosecureauth.com/
We moved from RSA and really wouldn't look back.
SSH Communications Security's Tectia MobileID is by far the most cost effective solution, also the most scalable and reliable. What's more, you can decide whatever One-Time-Password delivery mechanism you want to be used: Flash SMS, email, voice call, lists, software tokens and hardware tokens, MS UAG, and so on. Check it out at http://ssh.com/index.php/products/tectia-mobileid.html
Finally, they are an official Technology Partner with Juniper networks for SSL VPN. Attached the commercial presentation.
you don't have too look for support by Juniper SA if you can integrate the solution by one of the available authentication Servers, for example:
Use Radius Server (a lot of 2 Factor Authentication solutions do support Radius authentication have a Radius Server integrated so you can use everyone of them, even if it's not listed as "supported") don't forget that.
We use VASCO which is the industry leader world wide with over 75 million users. Around 1/4th - 1/6th the cost of RSA setup and multiple form factors the coolest being SMS based two factor
We challenge you to find a better solution for two-factor authentication on a Juniper SA than Duo Security!
Duo integrates in minutes with the Juniper SA with no hardware or software at all, allowing your users to enroll their own phones for two-factor authentication.
And logging in is as easy as tapping a button on your phone (or using any of our legacy phone call, SMS, or token methods):