fortinet vpn client two factor authentication

Use the same shared key when you configure your RADIUS client resource in AuthPoint.Īfter you have added the AuthPoint Gateway RADIUS server, a group will authenticate with this server must be defined. In the Secret text box, type a shared secret to identify your RADIUS client.In the IP/Name text box, type the IP address of the AuthPoint Gateway (RADIUS server).In this example, we type AuthPoint Gateway. In the Name text box, type a name for the RADIUS server.Select User & Authentication > RADIUS Servers.Log in to the FortiGate 60E web UI at The default IP address is 192.168.1.99.For more information, see About Gateways. The AuthPoint Gateway functions as a RADIUS server and must be installed somewhere on your network that has Internet access and that can connect to your RADIUS clients. To use RADIUS authentication with FortiGate Firewall VPN you must add a RADIUS server (the AuthPoint Gateway). A token is assigned to a user in AuthPoint.Ĭonfigure Fortinet 60E Firewall Configure a RADIUS Server.You have a FortiClient V7.0.5 or higher.End-users can log in to the FortiGate 60E Firewall.You have installed and configured the AuthPoint Gateway (see About Gateways).This diagram shows the data flow of an MFA transaction for RADIUS.īefore you begin these procedures, make sure that:

Fortinet SSL VPN Authentication Data Flow with AuthPointĪuthPoint communicates with various cloud-based services and service providers with the RADIUS protocol. This integration was tested with version 7.2.2 of Fortinet FortiGate 60E. Your Fortinet Firewall must already be configured and deployed before you set up MFA with AuthPoint. This document describes how to set up multi-factor authentication (MFA) for your Fortinet Firewall with AuthPoint, and configure your Fortinet Firewall to integrate with AuthPoint RADIUS.

Fortinet SSL VPN Integration with AuthPoint Gateway Deployment Overview

Fortinet vpn client two factor authentication