Skip to main content
Somashekara_Hanumant
Staff & Editor
Somashekara_Hanumant
Staff & Editor
May 8, 2025 3:12 PM UTC

Technical Tip: Verifying two-factor authentication is enabled for SSL VPN users

Description This article describes how to check whether two-factor authentication is enabled for SSL VPN users.
Scope FortiGate with Local/LDAP/RADIUS users with two-factor authentication enabled.
Solution

To verify that two-factor authentication is enabled for SSL VPN users, follow these steps:

 

  1. Add the 'SSL-VPN Monitor' widget under the Dashboard:

 

sslvpn_monitor.JPG

 

  1. After adding the widget, add the column 'Two Factor Authentication' by right-clicking as shown below:

 

sslvpn_monitor2.JPG

 

  1. The 'Two Factor Authentication' column on the list of users connected via SSL VPN.

 

sslvpn_monitor3.JPG

 

4. Another method is to use the CLI command 'get vpn ssl monitor'. 

 

2fa-command.png

 

 

    Terms & ConditionsAccessibility statement
    Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024