Skip to main content
Elkomy
Explorer
December 4, 2024
Question

Fortigate access issue

  • December 4, 2024
  • 15 replies
  • 3235 views

Hello

Anyone available for urgent support 

I have fortigate 81e I have config admin login to fortigate using two factor authentication and now when I login to fortigate I don't receive otp I tried to access it over console it also ask for otp that I didn't receive I need urgent support please 

15 replies

dingjerry_FTNT
Staff
Staff
December 4, 2024

Hi @Elkomy ,

 

What kind of the OTP method are you using? Email? SMS?

 

To be honest, if you have no access to FGT, we can do nothing to troubleshoot on FGT.

Elkomy
ElkomyAuthor
Explorer
December 4, 2024

Email token

dingjerry_FTNT
Staff
Staff
December 4, 2024

Is this FGT in production or your lab?  In other words, can we format and reload the image?

 

Was it working before?  Is it a new configuration? 

 

dingjerry_FTNT
Staff
Staff
December 4, 2024

BTW, is this FGT in production or your lab?

Elkomy
ElkomyAuthor
Explorer
December 4, 2024

It is production environment 

dingjerry_FTNT
Staff
Staff
December 4, 2024

Hi @Elkomy ,

 

So is this FGT managed by FMG?  I guess no.

 

Can we schedule a maintenance window?

 

What is the firmware version for your FGT?  If it is before 7.2.4, you may try the "maintainer" method to reset the admin password:

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Resetting-a-lost-admin-password/ta-p/197045

dingjerry_FTNT
Staff
Staff
December 5, 2024

Hi @Elkomy ,

 

I have figured out one workaround and tested it in my lab:

 

1) Set up one FMG (7.2.8 GA or 7.4.5 GA, both will support FortiOS 7.2.9);

2) If you are using FMG 7.4.5 GA, make sure to enable ADOM mode and create one ADOM for FortiGate type with 7.2;

3) In Device Manager view, click "Add Device" to add this FGT with one admin account with Super_admin profile (I hope your client did not delete the default admin account).  FMG will NOT ask for the token for two-factor authentication.

4) Once Import is done, either edit one existing admin account to disable the two factor authentication or create a new admin account with no two factor authentication with Super_Admin.

 

dingjerry_FTNT_0-1733370366998.png

 

 

In my lab test, I created "test" admin account.

5) Push the changes back to the FGT.

 

You will regain the access to the FortiGate.

 

Elkomy
ElkomyAuthor
Explorer
December 5, 2024

does this solution require FMG-access on fortigate interface to be enabled or not?