SSL VPN, with Client Cert, Username and Password + Forti Token

[edinelpare]

Hello,

We have our SSL VPN with a FortiToken registered each.

We would like to know if it's possible to create a certificate to authenticate the machine they are connecting. 

Any idea if it's possible. we would like to have the forticlient install the cert. 

The user will login with the cert with username and password. 

i have found a few but they are removing the forti token on the configuration.
https://docs.fortinet.com/document/fortigate/6.2.12/cookbook/751987/ssl-vpn-with-ldap-integrated-cer...
https://docs.fortinet.com/document/fortigate/6.2.12/cookbook/266506/ssl-vpn-with-certificate-authent...

[rbraha]

Hi Edinelpare,

Technically it can be done ,

Check the below documentation for user/passw and certificate authentication ,it may help

 https://community.fortinet.com/t5/FortiGate/Technical-TIp-SSL-VPN-Authentication-using-User-Certific...

If you want to use user/pass ,certificate check and token  l would suggest to reach your Fortinet Sales Representative on your area so they can help you to integrate this .