Enter your the shared secret that you used for your RADIUS server (see Figure 1-1).Enter the IP address of your ESA RADIUS server.Enter a name for the server (for example, ESA RADIUS).Navigate to Authentication в†’ RADIUS Server.Login to the FortiGate admin interface.Step II - Configure RADIUS server settings for your FortiGateВ® device You must now configure the Fortinet FortiGateВ® SSL VPN device to communicate with the ESA Server. Make sure that the check box next to Mobile Application is selected.Д®SA has now been configured to communicate with the Fortinet FortiGateВ® SSL VPN device.It is also recommended that you limit VPN access to a security group in the UsersВ section. To prevent locking any existing, non-2FA enabled AD users out of your VPN we recommend that you allow Non-2FA usersВ during the transitioning phase.In the AuthenticationВ section apply the settings shown in Figure 1-1 below.The shared secret is the RADIUS shared secret for the external authenticator that you will configure on your appliance.If your appliance communicates via IPv6, use that IP address along with the related scope IDВ (interface ID). The IP address is the internal IP address of your appliance.

Configure the IP AddressВ and Shared SecretВ for the Client so that they correspond to the configuration of your VPN appliance.Give the RADIUS client a memorable name for easy reference.Click the hostname, then click Create New Radius Client.Navigate to Components > RADIUSВ and locate the hostname of the server running the ESA RADIUS service.To allow the Fortinet FortiGateВ® SSL VPN device to communicate with your ESA Server, you must configure the Fortinet FortiGateВ® SSL VPN device as a RADIUS client on your ESA Server: If you wish to utilize other Client type, refer to generic description of Client typesВ and verify with the vendor if the VPN appliance supports it. This integration guide utilizes Client does not validate user name and passwordВ Client type for this particular VPN appliance.

Fortinet vpn login