SSL VPN with Fortiauthenticator MFA and AD authentication

Is it possible to configure Fortigate to use Fortiauthenticator with MFA and AD authentication, with NTLM v1 disabled on DC's ?

With ntlm v1 enabled everything works fine, but with v1 disabled, authentication fails with error :

Windows AD user authentication(mschap) with no token failed: AD auth error: Logon failure (0xc000006d)

Login to fortiauthenticator works fine, with AD account, but when trying to login using vpn client, it fails.

New Member

Sorry to bring up an old thread, but did you ever fix this?

SalasAuthor

New Member

Yes, I had to AD join fortiauthenticator.

Remote Auth. Servers, Ldap, Windows Active Directory Domain Authentication

But it's not working with 6.6.2 fortiauthenticator version.

Sign up