Defender - subscription license + 24x7 Support - 1 internal user

Their 2FA solution, Defender, enhances security by requiring two-factor authentication to gain access to your network resources. Defender uses your current identity store within Microsoft Active Directory (AD) to enable two-factor authentication. It takes advantage of AD's inherent scalability and security to eliminate the time and expense involved with setting up and maintaining proprietary databases. Defender's web-based administration, user self-registration and ZeroIMPACT migration capabilities ease implementation for administrators and users. Plus, Defender hardware tokens utilize their full battery life and provide software tokens that never expire.