FortiAuthenticator Token Transfer

[streeb2021]

We have our FortiAuthenticator behind a Fortigate and are being told that we need to open up the FortiAuth to the rest of the world for port 443 to allow the token transfer facility on FTM? Does this sound right?

[xsilver_FTNT]

FortiToken Mobile management (assign/remove from user etc) on FortiGate or FortiAuthenticator needs access to outer FortiCare and FortiGuard servers already. This is done via TLS encrypted tunnel on tcp.443. Nothing new. FortiAuthenticator needs to allow transfers, and setting is in FortiAuthenticator GUI:

> Authentication > User Account Policies > Tokens > FortiToken Mobile Transfer > Enable .. Set it to allow FortiToken Mobile app request  to transfer tokens to a new device.