Re: IPsec with multiple NPS groups

Somashekara_Hanumant · 09-11-2025

Description This article describes how to increase the Email/SMS token timeout on FortiAuthenticator. Scope FortiAuthenticator. Solution The administrator can increase the Email/SMS token timeout with the following method: Authentication -> User Acco...

Somashekara_Hanumant · 09-10-2025

Description This article describes how to view the username/ip address on forward traffic logs using FSSO logged on domain users, even though the FSSO user is not authenticated on the respective firewall policy. Scope FortiGate, FSSO, Log. Solution T...

Somashekara_Hanumant · 09-09-2025

Description This article explains how to create a custom admin user with limited permissions on FortiAuthenticator. Scope FortiAuthenticator Solution Follow the steps below to create a custom admin user with limited permissions: Login as a Super Admi...

Somashekara_Hanumant · 07-11-2025

Description This article describes how to import users using remote-sync rules when already imported users are there. Scope FortiAuthenticator. Solution Using remote sync rules, users can import users from either an OU or/Security group. Importing a ...

Somashekara_Hanumant · 05-22-2025

Description This article explains how to enable proxy settings on FortiAuthenticator to communicate with FortiGuard services Scope FortiAuthenticator, FortiGuard. Solution If the admin wants to enable proxy settings on FortiAuthenticator to communica...

Somashekara_Hanumant · 08-27-2024

Hello AEK, Request you to please open a web ticket, so that one of our engineer would be able to further assist you on this. Regards, Somu

Somashekara_Hanumant · 08-27-2024

Hello AEK, Please refer the below screen capture. On the same vendor Specific you need to add multiple groups. Hope this answers your question. Regards Somu

Somashekara_Hanumant · 08-27-2024

Hello AEK, No need to create multiple NPS policies, on the same policy you need to add multiple groups under Vendor Specific option, and bind these policies on FortiGate. Regards, Somu

Somashekara_Hanumant · 08-26-2024

Hi AEK, As suggested on below article, need to configure multiple groups attributes on NPS server and also need to bind these groups on FGT. https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-FortiGate-and-Microsoft-NPS-Radius/ta-p...

Somashekara_Hanumant · 08-26-2024

Hi, Hi, If you are looking to disable and enable the 'nattraversal' on IPSec phase1 settings, then you need to create action, trigger and Stitch as below Action: config system automation-actionedit "ipsec"set action-type cli-scriptset minimum-interva...

User Statistics

User Activity

Technical Tip: How to increase Email/SMS token timeout on FortiAuthenticator

Technical Tip: Viewing the username/IP address on traffic logs using FSSO server logged on users

Technical Tip: Steps to create a custom admin user with limited permissions

Technical Tip: Configuring remote sync-rules when already imported users are available

Technical Tip: How to configure FortiGuard communication via proxy on FortiAuthenticator