1

Just wanted to inquire if there is a way with FortiGate 60E to setup 2FA without setting-up a Forti-Authenticator or any additional costs? We are currently using this FW for our SSL VPN in our small office and wanted to increase security for users via 2FA.

Using SonicWalls before and it has an option to do SMS or eMail for FREE. Just hoping FortiGates have this as well.

Cheers!

1

You can configure email 2FA for a user like this:

#config user local
    edit {username}
       set type password
       set two-factor email
       set email-to {user_email_address}
       set passwd {password}
    next
end

https://kb.fortinet.com/kb/documentLink.do?externalID=FD45585

SMS or certificate authentication is also possible: https://www.fortinetguru.com/2016/06/two-factor-authentication/

Finally, you can use a RADIUS server with any kind of authentication behind it, but that is a lot more complicated.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.