Description This article clarifies the FortiAuthenticator's password
character limitation when creating or editing an SMTP server entry via
the GUI. Scope FortiAuthenticator Solution FortiAuthenticator stores the
passwords in an encrypted form. Due t...
Description This article describes how the minimum and maximum TLS
settings for FortiPAM GUI access can be adjusted. Scope FortiPAM 1.x.
Solution FortiPAM uses a VIP object for GUI access which has its own TLS
security settings. The VIP object's TLS ...
Description This article clarifies the possible authentication methods
used for connecting to VNC servers via FortiPAM. Scope FortiPAM v1.x.
Solution FortiPAM supports connections to VNC servers on various
platforms, such as MacOS, Windows and Linux,...
Description This article clarifies the prerequisites for using the
FortiClient PAM module for some common scenarios. When using native
launchers to connect to target remote servers via FortiPAM and through
locally installed clients (rdp.exe, putty, v...
Description This article describes how to activate a newly purchased
FortiGuard SMS license in FortiAuthenticator. Scope FortiAuthenticator.
Solution Once the FortiGuard SMS license has been purchased, log in to
the FortiAuthenticator GUI and navigat...
Hi Paul, from what I see, I think you need to change your
account-key-filter to filter to the sAMAccountName format. This would
strip the domain suffixes from the UPN part, and would search only for
your username as a sAMAccountName value.The only pr...
These debugs need to be enabled on the FortiGate CLI, you can connect to
it over SSH by following this article:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-create-a-log-file-of-a-session-using-PuTTY/ta-p/194148
As for the pop-up,...
Hi Clio, FortiGate has an option in the RADIUS settings, called
radius-coa. In order to process incoming Disconnect-Requests from a
RADIUS server, you would need to enable this option on the FortiGate.
FortiGate would in that case process the receive...
Hi, running the following debugs on the FGT should give some better
understanding on where exactly is it failing. diag debug reset diag
debug console timestamp enable diag debug app samld -1 diag debug app
sslvpn -1 diag debug enable Does the SAML Id...
Hi Fred,If you do not see any users in one of the the FSSO Collector
Agents under "Show Logon Users", but see them on the other DC on the
other FSSO CA, then probably there is an issue with reading/receiving
logon events. For FSSO to work as expected...
