FortiAuthenticator and geolocation

[JoV]

Hi guys, I'm looking for an identity management solution and would like to know if FortiAuthenticator can monitor and prevent authentications from another country that a user is supposed to login from. Thanks.

[rbraha]

Hi @JoV 

FAC has multiple function which can act as SAML IDP, Radius server... but on FAC you can disable under Network Interfaces which services to not be used so you can minimize the exposure of FAC in internet ,but if  radius clients are added on FAC and  when is a request to authenticate towards FAC , FAC will process that request for that user. So its suggested to block Geo location on Firewall side or to use WAF so you can inspect and prevent request toward FAC.