Trying to disable FTM Push for some users (not all)

[PFR_74]

Hi Community,

We are using FG + FAC300 to establish sslvpn tunnel, with FotitokensMobile and FTM push.

For some reason, somme phones are not able to handle FTM push properly (approx 3/100 users).

We would like to disable FTM push for these users.

On the FAC, i created a group "nopush", type remote-LDAP / importe-remote-LDAP users.

This group is set with a radius attribute "fortinet - group - name" - static -  string "nopush".

On the Radius service, i created a supplemental policy, with highest priority, and RADIUS attribute criteria matching the previous fortinet group.

This policy has an advanced option in Authentication factos, to not 'allow FTM push'.

But every test i do, with an apporpriate user, i giving me a FTM push.

What am i missing ?

Ragards,

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,