Skip to main content
lpi
New Member
November 10, 2023
Question

Fortiauthenticator and FTM push issue

  • November 10, 2023
  • 5 replies
  • 2989 views

Hi,

I'm looking for a solution to be able to use FTM on the agent and the forti authenticator.

My setup is this one, FACv6.5.3, Fortigate 7.4.1, AD2K19 and agent version 5.

 

FTM is working the SSL-VPN firewall with local user and token.

Token authentication is working on the SSL-VPN with FAC radius.

Token authentication is working on the agent with password or PIN.

 

But in both last cases, FTM is not working.

Public IP/FQDN for FortiToken Mobile has been configured on the FAC using FQDN.

 

Do you have an idea ?

Regards

Laurent

 

5 replies

Anthony_E
Staff
Staff
November 13, 2023

Hello Laurent,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
pminarik
Staff
Staff
November 13, 2023

1, Do you have push enabled in the Agent app as shown here? https://docs.fortinet.com/document/fortiauthenticator/6.5.0/fortiauthenticator-agent-for-microsoft-windows-5-1-install-guide/19573/optional-configuration-settings (first screenshot, "Allow Push Authentication")

 

2, Does the mobile app receive the notification when a user attempts to get a push notification?

lpi
lpiAuthor
New Member
November 24, 2023

Hello,

Thanks for your email, yes both have been applied correctly. I found the problem in a short video that talks about an earlier version. The FAC push port must of course be different from the Firewall port and a VIP is required. Now everything works perfectly but I'll check if it's not a security problem.

Regards

Markus_M
Staff & Editor
Staff & Editor
November 24, 2023

Hi lpi,

push notifications are an interesting way for end users, but also difficult for the admins. I strongly suggest going through the best practices on FortiAuthenticator:
https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Best-practices-on-hardening-FortiAuthenticator/ta-p/274443
That covers a bunch of security concerns without impacting your user base, if done right.

 

Best regards,

 

Markus

lpi
lpiAuthor
New Member
November 24, 2023

Hi Markus,

Excellent, I'll read the document carefully. 

Best regards

Laurent

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!