For a while I have been meaning to type up a guide to setting up dual factor VPN's on Netscreen SSG firewalls. It took me a while to figure it all out, referring to lots of online sources so hopefully this will be useful to someone. I have a Juniper Netscreen SSG 140 firewall which various users are logging into, getting access to different systems based on their permissions. I used the excellent and cheap Yubikey from Yubico to get the second factor working. Feel free to post any queries or suggestions, I'll try to answer any I can but I'm far from an expert.