Technical Tip: Duo authentication plugin fails on 5.2.1
Description
This document will show how to fix DUO 2FA plugin on 5.2.1. This documentation does not walk through DUO Authentication configuration. Please reference the FortiSIEM User Guide on how to configure DUO 2F Authentication
The reason why this is here is because there has been a security fix on 5.2.1 version of FortiSIEM, unfortunately this causes a connection issue with https outbound to certain sites.
Scope
Version: 5.2.1
Solution
- ssh into the supervisor as root
- Edit /etc/httpd/conf/httpd.conf
- Find: Header always set Content-Security-Policy "default-src 'self'; img-src 'self' data: https://maps.googleapis.com https://maps.gstatic.com; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline';"
- Modify to: Header always set Content-Security-Policy "default-src 'self' https://*.duosecurity.com; img-src 'self' data: https://maps.googleapis.com https://maps.gstatic.com; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline';"
- Save the configuration change
- Restart httpd: service httpd restart
