fortiauthenticator setup questions

[bakarudin]

we purchased the fortiauthenticator for two main reasons, 1- to get away from using the Fortinet Single Signon Agent for authentication purposes, and 2 - to use the fortitokens so we can do MFA on forticlient.

we want to do MFA first, is there any problem with setting up fortiauthenticator just for MFA, and later setting it up for replacing the FSSO agent?

[rbraha]

Hello bakarudin ,

There is no problem with that , you can configure FAC to use MFA with SSL VPN authentication with FCT and later you can use FAC as Collector Agent to receive logon events on DC and to forward these events to FGT. 

https://docs.fortinet.com/document/fortigate/6.2.12/cookbook/207191/ssl-vpn-with-radius-and-fortitok...

https://docs.fortinet.com/document/fortiauthenticator/6.4.6/administration-guide/712256/general-sett...

[Sheikh]

Hi,

Fortiauthenticator can be configured for MFA for number of services e.g. SSLVPN, Portals, Admin console access, Logon to Domain computer using Fortiauthenticator Agent for Microsoft Windows and so on.

https://docs.fortinet.com/document/fortiauthenticator/6.4.0/fortiauthenticator-agent-for-microsoft-w...

https://docs.fortinet.com/document/fortiauthenticator/6.4.0/fortiauthenticator-agent-for-microsoft-o...

regards,

Sheikh