Description This article describes the technical process of FortiToken
activation, FortiToken Mobile and FortiToken Hardware. Scope
FortiAuthenticator, FortiGate, FortiPAM, FortiProxy. Solution This
article is focuses on FortiAuthenticator for centra...
Description In environments that integrate two-factor authentication it
is important to understand the message flow. If troubleshooting is
required, it is important to understand what messages may be problematic
or missing, in order to troubleshoot a...
Description This article describes FTP communication through FortiProxy
and the required Syntax with CURL. Scope FortiProxy may also be
applicable for FortiGate to some extent. Solution CURL is a versatile
command-line program available for Linux and...
Description This article describes general troubleshooting and
considerations when deploying the FortiAuthenticator to handle FSSO
operation in high-performance environments. Scope FortiAuthenticator is
used as an FSSO Collector. Solution Table of co...
Description This article describes an example use case for certmonger
and the FortiAuthenticator as SCEP server. Note that certmonger is a
third party tool and not endorsed by Fortinet. Its documentation can be
found here:https://www.freeipa.org/page...
more detail will be needed. It sounds like the notification doesn't
arrive at the end users phone. On the FortiAuthenticator
https://fac-ip/debug, enable the RADIUS debug and reproduce the issue.
There will be something about a "session_id" when the ...
It will help to say how your FSSO setup is done. FSSO works by reading a
logon event with the user information from the DC. This will be
collected and then sent to the firewall. Typically, the collecting is
done with a Collector Agent. It is also pos...
Hey, the "gw validation failed" is quite generic and often not really
helpful.Check the configuration on the "config vpn ipsec
phase1-interface" which should have a peer user referenced either
directly or on a firewall policy that uses the tunnel. EA...
rootCA - no chance. FortiAuthenticator can send it, if all intermediates
and root CA are already imported.The client though won't care though -
the rootCA is required to be on the client already. Importing the
certificate is of course not the solutio...
Hey, on this here: "Verify return code: 20 (unable to get local issuer
certificate)" means basically that the FortiAuthenticator sends a
certificate that the client (OpenSSL) is unable to verify the chain for.
It may or may not have a root CA, but th...
