Skip to main content
avilt
New Member
October 2, 2019
Question

2FA For Administrative Access

  • October 2, 2019
  • 1 reply
  • 2343 views

I have around ten 200E series firewalls and I would like to implement 2FA for administrative access of firewall. There is no internet, SMS available. So what is the best way to implement the 2FA for firewall management (administrative) ?

    1 reply

    emnoc
    New Member
    October 2, 2019

    So the uses do they have mobile device and google authenticator installed?

    I put together these examples of MFA 

     

    http://socpuppet.blogspot.com/2019/09/howto-use-mfa-with-fortigate-and_14.html

    http://socpuppet.blogspot.com/2019/09/howto-use-mfa-with-fortigate-and.html

    http://socpuppet.blogspot.com/2017/04/securing-fortigate-sslvpn-with-mfa-by.html

     

    Three examples of MFA without fortitoken and they use radius for the user authenticator. You can also use certificates also.  If the machine authenticating is inside or your network, internet access is not required

     

    Ken Felix