Examples

• Introduction
• FortiToken and FortiToken Mobile
  • 2FA with FortiToken Mobile
    • Adding a FortiToken to FortiPAM
    • Configuring a local user with FortiToken as the authentication type
    • Enabling FortiToken Mobile push notification
    • Results
    • Setting up FortiToken Mobile
• RADIUS authentication
  • 2FA on FortiPAM for RADIUS users using FortiAuthenticator
    • Configuring a RADIUS server on FortiPAM
    • Creating remote user group on FortiPAM
    • Enabling 2FA on FortiAuthenticator
    • Creating a RADIUS user on FortiPAM
    • Results
• SAML authentication
  • 2FA on FortiPAM for SAML users using FortiAuthenticator
    • Importing FortiAuthenticator certificate to FortiPAM
    • Configuring FortiAuthenticator as a SAML IdP
    • Configuring FortiPAM as an SP
    • Creating a remote user group on FortiPAM
    • Creating a SAML user on FortiPAM
    • Results
• ZTNA
  • ZTNA endpoint control on FortiPAM
    • Configuring EMS on FortiPAM
    • Registering the endpoint PC to EMS server
    • Configuring a ZTNA server on FortiPAM
    • Configuring proxy rule on FortiPAM
    • Adding a ZTNA tag to a secret for launching control
• Secret configurations
  • Accessing a Linux server using PuTTY
    • Creating a secret with Unix template
    • Launching a secret for the Linux server
  • Accessing a Cisco router using PuTTY
    • Creating an associated secret
    • Creating a secret with Cisco User (SSH Secret) template
    • Launching a secret for the Cisco router
  • Accessing a FortiGate using PuTTY, Web SSH, or the Web launcher
    • Creating a secret with Unix template
    • Launching a secret for the FortiGate
  • Accessing a Windows server using the Remote Desktop- Windows launcher
    • Creating a secret with Windows Machine template
    • Launching a secret for the Windows server
  • Visiting a web application/platform using web launchers
    • Installing Fortinet Privileged Access Agent web extension on Chrome/Edge
    • Creating a secret for general web application/platform
    • Creating a secret for AWS root/IAM account
    • Visiting web application/platform using web launcher
    • Reviewing video recording for the web launching session
    • Reviewing secret log for the web launching session
  • Accessing a generic machine using Web VNC, VNC Viewer, or the TightVNC launcher
    • Creating a secret with Machine template
    • Launching a secret for the machine
  • Accessing a target server using locally installed WinSCP client
    • Installing WinSCP on a local machine
    • Creating a secret with Unix Account (SSH Password) template
    • Launching a secret for the target server using the WinSCP launcher
  • Accessing an SFTP server using the Web SFTP secret launcher
    • Creating a secret with Unix Account (SSH Password) template
    • Launching a secret for the SFTP server using the Web SFTP launcher
  • Accessing an SMB server using Web SMB launcher
    • Creating a secret with Windows Domain Account (Samba) template
    • Verifying the password
    • Launching a secret for the SMB server using the Web SMB launcher
  • Checking out and checking in a secret
    • Creating a secret with check out enabled
    • Checking out a secret
    • Checking in a secret
  • Using a secret requiring approval
    • Creating an approval profile
    • Creating a secret with mandatory approval requirement
    • Sending a request to access a secret
    • Approving a secret request
    • Launching a secret that requires approval
  • Running a script on a target server using jobs
    • Creating a job approval profile
    • Creating a secret with mandatory approval requirement for launching a job
    • Creating an ssh script type job
    • Sending a request to access the job
    • Approving a job request
    • Results
  • Configuring a secret that supports TOTP
    • Configuring a secret template with TOTP
    • Creating a secret with TOTP enabled
  • Accessing a MySQL server using MySQL CLI launcher
    • Creating a secret using the database server template
    • Launching a secret for the MySQL server
  • Configuring integrity check for the PuTTY launcher
    • Creating an entry for the PuTTY launcher
    • Enabling integrity check in the launcher and secret template
    • Creating a secret with integrity check
    • Launching the secret
  • Block uploading a JavaScript file via the Web SFTP launcher
    • Configuring the DLP file pattern
    • Configuring a DLP sensor profile
    • Creating a secret with a DLP sensor profile
    • Results
  • Block transferring .exe files and log file downloads of size larger than 500KB
    • Configuring the DLP file pattern
    • Configuring a DLP sensor profile
    • Creating a secret with a DLP sensor profile
    • Results
  • Updating a service account credential
    • Updating a service account credential
• Audit
  • Sponsored administrator audits secret activities
    • Creating a sponsored group
    • Creating a sponsor admin
    • Creating a secret with view permission for the sponsored group
    • Creating sponsored group members
    • Auditing
• Web proxy
  • Configuring the web proxy feature to prevent web credentials from leaking
    • Enabling the web proxy feature
    • Creating a secret target with web proxy
    • Creating a secret with web proxy
    • FortiPAM behind a FortiGate device
• RDP log retrieval
  • RDP log retrieving on FortiPAM
    • Creating an event filter profile
    • Creating a secret policy
    • Creating a secret target
    • Creating secret with an RDP event filter profile
    • Launching the secret
    • Checking the RDP logs
• Gateway
  • FortiPAM connects to a target through a FortiProxy acting as the gateway
    • Creating the FortiProxy gateway
    • Creating the secret target on FortiPAM
    • FortiProxy related configurations
• Change Log