Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
jomof
Contributor

Not receiving fortigate activation token

Hello Expert,

I  enabled two factor authentication  on my remote ssl vpn configuration  (firmwave 7.2.9 build 1688 (mature)

 

When I  simulate test with a user  gmail account, i am not receiving and activation code .Screenshot 2024-11-04 125219.pngScreenshot 2024-11-04 125145.png

 

I humble request some help with this issue.

 

Thank you

 

Regards

 

 

 

 

Please attachment for user setup and errors message gather from FortiGate logs

1 Solution
funkylicious
SuperUser
SuperUser

"jack of all trades, master of none"
11 REPLIES 11
funkylicious
SuperUser
SuperUser

Hi,

Try setting the port to specify and 587.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-email-alerts-with-Gmail/t...

"jack of all trades, master of none"
"jack of all trades, master of none"
jomof
Contributor

Hello ,

 

I tried as per your suggestion but still no token email in gmail.

 

Regards

jomof

Hello funkylicious 

 

Please attachmentScreenshot 2024-11-04 155833.png for debug information 

boneyard
Valued Contributor

Did yo also read the rest of the article, it suggests an app password. That might be the issue here.

jomof

Sorry I did not the article to end and app password was required

AnthonyH

Hello Jomof,

And do you know if you have giving third party access on your Gmail Account for FortiGate?
https://support.google.com/accounts/answer/14012355?hl=en

Technical Support Engineer,
Anthony.
AnthonyH
Staff
Staff

Hello jomof,


Can you share the following output here:
1)

get system email-server

2)
diag debug flow filter clear
dia debug flow filter addr 108.177.12.108
dia debug flow filter port 587
dia debug en

Technical Support Engineer,
Anthony.
jomof

Guyana_Int_Primary # diag debug flow filter clear

Guyana_Int_Primary # dia debug flow filter addr 108.177.12.108

Guyana_Int_Primary # dia debug flow filter port 587

Guyana_Int_Primary # dia debug en

Guyana_Int_Primary # 2024-11-04 23:05:00 sessionn 0x9725ee0, SSL connected
2024-11-04 23:05:00 sessionn 0x97220f0, SSL connected
2024-11-04 23:05:00 session: 0x9725ee0, rsp_state: ehlo, code: 250
2024-11-04 23:05:00 session: 0x97220f0, rsp_state: ehlo, code: 250
2024-11-04 23:05:00 session: 0x97220f0, rsp_state: auth, code: 334
2024-11-04 23:05:00 session: 0x9725ee0, rsp_state: auth, code: 334
2024-11-04 23:05:00 session: 0x97220f0, rsp_state: auth2, code: 534
2024-11-04 23:05:00 session: 0x9725ee0, rsp_state: auth2, code: 534
2024-11-04 23:05:00 session: 0x97220f0, rsp_state: quit, code: 221
2024-11-04 23:05:00 session finined
2024-11-04 23:05:00 _session_on_destroy
2024-11-04 23:05:00 <== send mail failed, m = 0x9722cb0 s = 0x97220f0
2024-11-04 23:05:00 session: 0x9725ee0, rsp_state: quit, code: 221
2024-11-04 23:05:00 session finined
2024-11-04 23:05:00 _session_on_destroy
2024-11-04 23:05:00 <== send mail failed, m = 0x9725590 s = 0x9725ee0
2024-11-04 23:05:20 create session
2024-11-04 23:05:20 resolve smtp.gmail.com to 1 IP
2024-11-04 23:05:20 ==> send mail
2024-11-04 23:05:20 connecting to 108.177.11.108 port 587
2024-11-04 23:05:20 session: 0x97220f0, rsp_state: greeting, code: 220
2024-11-04 23:05:20 session: 0x97220f0, rsp_state: ehlo, code: 250
2024-11-04 23:05:20 session: 0x97220f0, rsp_state: starttls, code: 220
2024-11-04 23:05:20 rsp_starttls: creating ssl structure for session 0x97220f0
2024-11-04 23:05:20 create_ssl: 0x7f000628c000
2024-11-04 23:05:20 sessionn 0x97220f0, SSL connected
2024-11-04 23:05:21 session: 0x97220f0, rsp_state: ehlo, code: 250
2024-11-04 23:05:21 session: 0x97220f0, rsp_state: auth, code: 334
2024-11-04 23:05:21 session: 0x97220f0, rsp_state: auth2, code: 534
2024-11-04 23:05:21 session: 0x97220f0, rsp_state: quit, code: 221
2024-11-04 23:05:21 session finined
2024-11-04 23:05:21 _session_on_destroy
2024-11-04 23:05:21 <== send mail failed, m = 0x9725590 s = 0x97220f0
2024-11-04 23:05:41 create session
2024-11-04 23:05:41 resolve smtp.gmail.com to 1 IP
2024-11-04 23:05:41 ==> send mail
2024-11-04 23:05:41 connecting to 108.177.11.108 port 587
2024-11-04 23:05:41 session: 0x97220f0, rsp_state: greeting, code: 220
2024-11-04 23:05:41 session: 0x97220f0, rsp_state: ehlo, code: 250
2024-11-04 23:05:41 session: 0x97220f0, rsp_state: starttls, code: 220
2024-11-04 23:05:41 rsp_starttls: creating ssl structure for session 0x97220f0
2024-11-04 23:05:41 create_ssl: 0x7f000628c000
2024-11-04 23:05:41 sessionn 0x97220f0, SSL connected
2024-11-04 23:05:42 session: 0x97220f0, rsp_state: ehlo, code: 250
2024-11-04 23:05:42 session: 0x97220f0, rsp_state: auth, code: 334
2024-11-04 23:05:42 session: 0x97220f0, rsp_state: auth2, code: 534
2024-11-04 23:05:42 session: 0x97220f0, rsp_state: quit, code: 221
2024-11-04 23:05:42 session finined
2024-11-04 23:05:42 _session_on_destroy
2024-11-04 23:05:42 <== send mail failed, m = 0x9725590 s = 0x97220f0

jomof

 

Guyana_Int_Primary # get system email-server
type : custom
reply-to : DoNotReply@notification.fortinet.net
server : smtp.gmail.com
port : 587
source-ip : 0.0.0.0
source-ip6 : ::
authenticate : enable
validate-server : disable
username : jomfra@gmail.com
password : *
security : starttls
ssl-min-proto-version: default
interface-select-method: auto

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors