Configure FortiGate SSL VPN with Free FortiToken

[joshiamarpreet]

Network Configuration

WAN IP: 1.1.1.1/32

Internal IP: 10.0.0.4/24

SSLVPN Tunnel range: 10.112.1.0 - 10.112.1.254

To Add newly bought Tokens to FortiGate: -

1. In User > FortiToken > Create New > enter the serial number of the FortiToken and click on ‘+’ symbol, and click OK.

1. By default, we get Two FortiTokens available with the FortiGate in place.

1. Enable FortiToken on user: -

Enable the Two factor authentication, and select the FortiToken serial number which has already been created.

Select Email and provide Email Address for one time FortiToken Application setup

Scanning the QR Code via Mobile App (FortiToken Application) Downloaded

Edit WAN interface from where SSL VPN setup is done. Enable FTM for FortiToken Mobile Authentication.

Testing

Open FortiClient and Select VPN Profile along with username and password followed with OTP.

[xsilver_FTNT]

Hi @joshiamarpreet ,

is there any problem with this config, or is this supposed to be some KB article for the others enhancing what is said on https://docs.fortinet.com/document/fortigate/7.2.0/administration-guide/183204/ssl-vpn-with-fortitok... with your screenshots ?

[joshiamarpreet]

Dear @xsilver_FTNT ,

Could not understand the statement can you elaborate please. 
The one posted by me above is on 2 free tokens we get with every box we buy and how to enable it on ssl vpn users with full use test case. 
Also if required post above configuration, customers/ users can buy additional tokens and add them to FortiGate and perform same steps to attach them to remaining users. 

The link shared by you is again for SSL VPN users but with push functionality where end user needs to approve/ decline as per the push notification received on endpoint mobile device.