DUO MFA with Fortinet Firewalls

[Yazar]

Dear Team,

Integrating Fortinet with DUO for MFA will it support both OTP and Push notification?

Also if it support OTP, do we have to put OTP at VPN client level right? Please clarify.

what is the difference if we use Forti Authenticator instead of Google DUO.

Thanks,

Yazar

[Magion]

As far as I know you can only use 3rd party MFA via RADIUS. It's what we have configured for our MFA solution and is working fine.

[droehrig]

We use DUO via Radius with our Fortigates. You can push, call and passcode via the app. You have to have a Duo proxy as well to authenticate as well. Just follow the instructions from Duo and it will be great. We have been using it for 5 years now with no problems. 

[emnoc]

It's simple to do

http://socpuppet.blogspot.com/2017/04/securing-fortigate-sslvpn-with-mfa-by.html

Ken Felix