Trying to disable FTM Push for some users (not all)

[PFR_74]

Hi Community,

We are using FG + FAC300 to establish sslvpn tunnel, with FotitokensMobile and FTM push.

For some reason, somme phones are not able to handle FTM push properly (approx 3/100 users).

We would like to disable FTM push for these users.

On the FAC, i created a group "nopush", type remote-LDAP / importe-remote-LDAP users.

This group is set with a radius attribute "fortinet - group - name" - static -  string "nopush".

On the Radius service, i created a supplemental policy, with highest priority, and RADIUS attribute criteria matching the previous fortinet group.

This policy has an advanced option in Authentication factos, to not 'allow FTM push'.

But every test i do, with an apporpriate user, i giving me a FTM push.

What am i missing ?

Ragards,

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello,

We are still looking for someone to help you.

We will come back to you ASAP.

Thanks,

[Anthony_E]

Hello,

To disable FortiToken Mobile (FTM) push notifications for some users:

1. Access FortiAuthenticator: Log in to your FortiAuthenticator management interface.
2. Navigate to User Management: Go to the section where user accounts are managed.
3. Select the User: Find and select the user account for which you want to disable FTM push notifications.
4. Edit User Settings: Within the user account settings, look for the option related to FortiToken Mobile push notifications.\
5. Disable FTM Push: Toggle the setting to disable FortiToken Mobile push notifications for the selected user.
6. Save Changes: Ensure you save the changes to apply the new settings.

[AEK]

Hi PFR

I guess the RADIUS request are not hitting the first policy. Can you check in the FAC logs?