Skip to main content
Somashekara_Hanumant
Staff & Editor
Staff & Editor
May 8, 2025

Technical Tip: Verifying two-factor authentication is enabled for SSL VPN users

Description This article describes how to check whether two-factor authentication is enabled for SSL VPN users.
Scope FortiGate with Local/LDAP/RADIUS users with two-factor authentication enabled.
Solution

To verify that two-factor authentication is enabled for SSL VPN users, follow these steps:

 

  1. Add the 'SSL-VPN Monitor' widget under the Dashboard:

 

sslvpn_monitor.JPG

 

  1. After adding the widget, add the column 'Two Factor Authentication' by right-clicking as shown below:

 

sslvpn_monitor2.JPG

 

  1. The 'Two Factor Authentication' column on the list of users connected via SSL VPN.

 

sslvpn_monitor3.JPG

 

4. Another method is to use the CLI command 'get vpn ssl monitor'. 

 

2fa-command.png

 

 

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT