Skip to main content
Elkomy
Explorer
Dec 4, 2024 4:28 PM UTC
Question

Fortigate access issue

Hello

Anyone available for urgent support 

I have fortigate 81e I have config admin login to fortigate using two factor authentication and now when I login to fortigate I don't receive otp I tried to access it over console it also ask for otp that I didn't receive I need urgent support please 

15 replies

dingjerry_FTNT
Staff
Staff
Dec 4, 2024 4:39 PM UTC

Hi @Elkomy ,

 

What kind of the OTP method are you using? Email? SMS?

 

To be honest, if you have no access to FGT, we can do nothing to troubleshoot on FGT.

Translate
Elkomy
ElkomyAuthor
Explorer
Dec 4, 2024 4:40 PM UTC

Email token

Translate
dingjerry_FTNT
Staff
Staff
Dec 4, 2024 4:45 PM UTC

Is this FGT in production or your lab?  In other words, can we format and reload the image?

 

Was it working before?  Is it a new configuration? 

 

Translate
dingjerry_FTNT
Staff
Staff
Dec 4, 2024 4:39 PM UTC

BTW, is this FGT in production or your lab?

Translate
Elkomy
ElkomyAuthor
Explorer
Dec 4, 2024 4:44 PM UTC

It is production environment 

Translate
dingjerry_FTNT
Staff
Staff
Dec 4, 2024 4:51 PM UTC

Hi @Elkomy ,

 

So is this FGT managed by FMG?  I guess no.

 

Can we schedule a maintenance window?

 

What is the firmware version for your FGT?  If it is before 7.2.4, you may try the "maintainer" method to reset the admin password:

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Resetting-a-lost-admin-password/ta-p/197045

Translate
dingjerry_FTNT
Staff
Staff
Dec 5, 2024 3:42 AM UTC

Hi @Elkomy ,

 

I have figured out one workaround and tested it in my lab:

 

1) Set up one FMG (7.2.8 GA or 7.4.5 GA, both will support FortiOS 7.2.9);

2) If you are using FMG 7.4.5 GA, make sure to enable ADOM mode and create one ADOM for FortiGate type with 7.2;

3) In Device Manager view, click "Add Device" to add this FGT with one admin account with Super_admin profile (I hope your client did not delete the default admin account).  FMG will NOT ask for the token for two-factor authentication.

4) Once Import is done, either edit one existing admin account to disable the two factor authentication or create a new admin account with no two factor authentication with Super_Admin.

 

dingjerry_FTNT_0-1733370366998.png

 

 

In my lab test, I created "test" admin account.

5) Push the changes back to the FGT.

 

You will regain the access to the FortiGate.

 

Translate
Elkomy
ElkomyAuthor
Explorer
Dec 5, 2024 9:43 AM UTC

does this solution require FMG-access on fortigate interface to be enabled or not?

Translate
Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024