Fortiauthenticator and FTM push issue

[lpi]

Hi,

I'm looking for a solution to be able to use FTM on the agent and the forti authenticator.

My setup is this one, FACv6.5.3, Fortigate 7.4.1, AD2K19 and agent version 5.

FTM is working the SSL-VPN firewall with local user and token.

Token authentication is working on the SSL-VPN with FAC radius.

Token authentication is working on the agent with password or PIN.

But in both last cases, FTM is not working.

Public IP/FQDN for FortiToken Mobile has been configured on the FAC using FQDN.

Do you have an idea ?

Regards

Laurent

[Anthony_E]

Hello Laurent,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[pminarik]

1, Do you have push enabled in the Agent app as shown here? https://docs.fortinet.com/document/fortiauthenticator/6.5.0/fortiauthenticator-agent-for-microsoft-w... (first screenshot, "Allow Push Authentication")

2, Does the mobile app receive the notification when a user attempts to get a push notification?

[lpi]

Hello,

Thanks for your email, yes both have been applied correctly. I found the problem in a short video that talks about an earlier version. The FAC push port must of course be different from the Firewall port and a VIP is required. Now everything works perfectly but I'll check if it's not a security problem.

Regards

[Markus_M]

Hi lpi,

push notifications are an interesting way for end users, but also difficult for the admins. I strongly suggest going through the best practices on FortiAuthenticator:
https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Best-practices-on-hardening-Forti...
That covers a bunch of security concerns without impacting your user base, if done right.

Best regards,

Markus

[lpi]

Hi Markus,

Excellent, I'll read the document carefully. 

Best regards

Laurent