FortiToken Mobile Push

You can configure the FortiToken Mobile Push services IP address and port number. Apple (APNS) and Google (GCM) provide the Push service for iPhone and Android, respectively. This helps to avoid locking tokens after disabling an already enabled two-factor authentication user.

config system ftm-push

set server-ip <ip-address>

set server-port [1-65535]

end

The default server port is 4433.

The server IP address is the public IP address of the FortiOS interface that the FTM calls back to. FortiOS uses this IP address for incoming FTM calls.

If an SSL VPN user authenticates with their token, then logs out and attempts to reauthenticate within a minute, a Please wait x seconds to login again message displays. This replaces a previous error/permission denied message. The x value depends on the calculation of how much time is left in the current time step.

config system interface

edit <name>

set allowaccess ftm

next

end

FortiOS supports FortiAuthenticator-initiated FTM Push notifications for users attempting to authenticate through a VPN and/or RADIUS (with FortiAuthenticator as the RADIUS server).