2FA For Administrative Access

[avilt]

I have around ten 200E series firewalls and I would like to implement 2FA for administrative access of firewall. There is no internet, SMS available. So what is the best way to implement the 2FA for firewall management (administrative) ?

[emnoc]

So the uses do they have mobile device and google authenticator installed?

I put together these examples of MFA 

http://socpuppet.blogspot.com/2019/09/howto-use-mfa-with-fortigate-and_14.html

http://socpuppet.blogspot.com/2019/09/howto-use-mfa-with-fortigate-and.html

http://socpuppet.blogspot.com/2017/04/securing-fortigate-sslvpn-with-mfa-by.html

Three examples of MFA without fortitoken and they use radius for the user authenticator. You can also use certificates also.  If the machine authenticating is inside or your network, internet access is not required

Ken Felix