Skip to main content
Putmano
New Member
April 25, 2020
Question

Push Notification Feature on FortiAuthenticator

  • April 25, 2020
  • 1 reply
  • 12018 views

We have FortiAuthenticator running version 6.1. We have radius with FortiToken Mobile as 2FA. We have enabled the Push Notification. However it seems not work as our mobile device never get the notification from FortiToken mobile. Any suggection settings on the FortiAuthenticator.

 

Thanks in advance.

    1 reply

    tanr
    New Member
    April 25, 2020

    Have you set the public IP and port that the push notification would need to come back to?  If your FAC doesn't have a its own public IP this is probably your FortiGate IP, or a mapped VIP. 

     

    See https://kb.fortinet.com/kb/documentLink.do?externalID=FD45559 and https://forum.fortinet.com/tm.aspx?m=176927 for details.  I played with this a while back, but can't remember if there were other issues.

     

    https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/927108/fortitoken-mobile-push describes doing this for FortiToken Mobile push on the FortiGate. 

    Putmano
    PutmanoAuthor
    New Member
    April 26, 2020

    Dear Tanr,

     

    I have configured the NAT for reply Push Notification from FortiToken Mobile. However when we tried by access the VPN via the 2 factor authentication. we don't get even the notification on the mobile. I think the fortitoken hasn't sent out the notification to fortitoken mobile.

    tanr
    New Member
    April 26, 2020

    Your FortiAuthenticator needs to actually be able to call out to DNS and to the Apple/Android notification servers. 

    Have you verified that it can do so?