Technical Tip: Unable to get FortiToken Cloud push...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 360609

Description

This article describes why FortiToken Cloud is not working while using an IPsec VPN, 'fnbam request ID XXXXXXXXXXXX unknown' is seen in the debug.

Scope

FortiGate, FortiToken Cloud.

Solution

When using the FortiToken Cloud push, the tunnel must be configured with IKEv2. If the tunnel is in IKEv1, the user can accept the push in the FortiClient, the FortiToken Cloud logs will show as accepted, but the tunnel will still refuse to connect.

When running the following debug, 'fnbam request ID XXXXXXXXXXXX unknown' will be seen:

diagnose debug reset

diagnose debug app ike -1

diagnose debug enable

Here is an example of this output:

Note:

Push notification set-up over dial-up is supported only starting with v7.4.4, v7.6.0, and below FortiClient versions:

v7.2.4 and above for Windows.
v7.2.5 and above for MAC.
v7.2.5 and above for Linux.

130

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Unable to get FortiToken Cloud push to work while using an IPsec VPN, 'fnbam request ID XXXXXXXXXXXX unknown' is seen in the debug