Troubleshooting Tip: How to strengthen RADIUS protocol configuration in FortiManager/FortiAnalyzer

Starting from FortiManager/FortiAnalyzer version 7.6.2, the user will be able to include the additional configuration parameters below to strengthen the RADIUS protocol settings.

config system admin radius

    edit <server>

        set protocol {tls | udp}           --> TLS over TCP (RadSec) is enabled when the protocol is TLS.

        set ca-cert <string>           --> Option is only available when the protocol is TLS.

        set client-cert <string>       --> Option is only available when the protocol is TLS.

        set message-authenticator {optional | require}     --> When set to require, Message-Authenticator attribute is always used for the RADIUS Access-Request process.

end