Examples

• Introduction
• FortiToken and FortiToken Mobile
  • 2FA with FortiToken Mobile
    • Adding a FortiToken to FortiPAM
    • Configuring a local user with FortiToken as the authentication type
    • Enabling FortiToken Mobile push notification
    • Results
    • Setting up FortiToken Mobile
• RADIUS authentication
  • 2FA on FortiPAM for RADIUS users using FortiAuthenticator
    • Configuring a RADIUS server on FortiPAM
    • Creating remote user group on FortiPAM
    • Enabling 2FA on FortiAuthenticator
    • Creating a RADIUS user on FortiPAM
    • Results
• SAML authentication
  • 2FA on FortiPAM for SAML users using FortiAuthenticator
    • Importing FortiAuthenticator certificate to FortiPAM
    • Configuring FortiAuthenticator as a SAML IdP
    • Configuring FortiPAM as an SP
    • Creating a remote user group on FortiPAM
    • Creating a SAML user on FortiPAM
    • Results
• ZTNA
  • ZTNA endpoint control on FortiPAM
    • Configuring EMS on FortiPAM
    • Registering the endpoint PC to EMS server
    • Configuring a ZTNA server on FortiPAM
    • Configuring proxy rule on FortiPAM
    • Adding a ZTNA tag to a secret for launching control
• Secret configurations
  • Accessing a Linux server using PuTTY
    • Creating a secret with Unix template
    • Launching a secret for the Linux server
  • Accessing a Cisco router using PuTTY
    • Creating an associated secret
    • Creating a secret with Cisco User (SSH Secret) template
    • Launching a secret for the Cisco router
  • Accessing a FortiGate using PuTTY, Web SSH, or the Web launcher
    • Creating a secret with Unix template
    • Launching a secret for the FortiGate
  • Accessing a Windows server using the Remote Desktop- Windows launcher
    • Creating a secret with Windows Machine template
    • Launching a secret for the Windows server
  • Visiting a web application/platform using web launchers
    • Installing Fortinet Privileged Access Agent web extension on Chrome/Edge
    • Creating a secret for general web application/platform
    • Creating a secret for AWS root/IAM account
    • Visiting web application/platform using web launcher
    • Reviewing video recording for the web launching session
    • Reviewing secret log for the web launching session
  • Accessing a generic machine using Web VNC, VNC Viewer, or the TightVNC launcher
    • Creating a secret with Machine template
    • Launching a secret for the machine
  • Accessing a target server using locally installed WinSCP client
    • Installing WinSCP on a local machine
    • Creating a secret with Unix Account (SSH Password) template
    • Launching a secret for the target server using the WinSCP launcher
  • Accessing an SFTP server using the Web SFTP secret launcher
    • Creating a secret with Unix Account (SSH Password) template
    • Launching a secret for the SFTP server using the Web SFTP launcher
  • Accessing an SMB server using Web SMB launcher
    • Creating a secret with Windows Domain Account (Samba) template
    • Verifying the password
    • Launching a secret for the SMB server using the Web SMB launcher
  • Checking out and checking in a secret
    • Creating a secret with check out enabled
    • Checking out a secret
    • Checking in a secret
  • Using a secret requiring approval
    • Creating an approval profile
    • Creating a secret with mandatory approval requirement
    • Sending a request to access a secret
    • Approving a secret request
    • Launching a secret that requires approval
  • Running a script on a target server using jobs
    • Creating a job approval profile
    • Creating a secret with mandatory approval requirement for launching a job
    • Creating an ssh script type job
    • Sending a request to access the job
    • Approving a job request
    • Results
  • Configuring a secret that supports TOTP
    • Configuring a secret template with TOTP
    • Creating a secret with TOTP enabled
  • Accessing a MySQL server using MySQL CLI launcher
    • Creating a secret using the database server template
    • Launching a secret for the MySQL server
  • Configuring integrity check for the PuTTY launcher
    • Creating an entry for the PuTTY launcher
    • Enabling integrity check in the launcher and secret template
    • Creating a secret with integrity check
    • Launching the secret
  • Block uploading a JavaScript file via the Web SFTP launcher
    • Configuring the DLP file pattern
    • Configuring a DLP sensor profile
    • Creating a secret with a DLP sensor profile
    • Results
  • Block transferring .exe files and log file downloads of size larger than 500KB
    • Configuring the DLP file pattern
    • Configuring a DLP sensor profile
    • Creating a secret with a DLP sensor profile
    • Results
  • Updating a service account credential
    • Updating a service account credential
  • Creating a secret with the Certificate Vault template
    • Creating a certificate secret
    • Setting up email alert for certificate expiry
  • Configuring a secret using the Target Only secret template
    • Example 1: Creating a secret using the Target Only template
    • Example 1: Launching the secret
    • Example 2: Creating a secret using the Target Only template
    • Example 2: Launching the secret
• Audit
  • Sponsored administrator audits secret activities
    • Creating a sponsored group
    • Creating a sponsor admin
    • Creating a secret with view permission for the sponsored group
    • Creating sponsored group members
    • Auditing
• Web proxy
  • Configuring the web proxy feature to prevent web credentials from leaking
    • Enabling the web proxy feature
    • Creating a secret target with web proxy
    • Creating a secret with web proxy
    • FortiPAM behind a FortiGate device
• RDP log retrieval
  • RDP log retrieving on FortiPAM
    • Creating an event filter profile
    • Creating a secret policy
    • Creating a secret target
    • Creating secret with an RDP event filter profile
    • Launching the secret
    • Checking the RDP logs
• Gateway
  • FortiPAM connects to a target through a FortiProxy acting as the gateway
    • Creating the FortiProxy gateway
    • Creating the secret target on FortiPAM
    • FortiProxy related configurations
  • Configuring FortiPAM/FortiGate as the reverse gateway
    • Configuring the reverse service on FortiPAM
    • Configuring reverse service on the gateway
    • Configuring traffic proxy on the gateway for forwarding secret launch (traffic plane)
    • Configuring a gateway entry on FortiPAM server for secret launch (traffic plane)
    • Configuring a target using reverse gateway on the FortiPAM server
    • Creating a secret for the target that uses the FortiPAM reverse gateway
    • Launching the FortiPAM secret
    • Creating a secret for the target that uses the FortiGate reverse gateway
    • Launching the FortiGate secret
    • Troubleshooting
  • Configuring FortiGate ZTFP forwarding access request from FortiPAM to the private target
    • Configuring ZTFP on FortiGate
    • Configuring a gateway on the FortiPAM server
    • Configuring a target using the forward gateway on FortiPAM server
    • Creating a secret for the target
    • Launching the secret from the FortiPAM server
    • Monitoring the secret
    • Troubleshooting
• SSH filter profiles
  • Configuring an SSH filter profile on FortiPAM to restrict SSH access to secret servers
    • Configuring SSH filter profiles in the CLI
    • Configuring SSH filter profiles using the GUI
• Automation
  • Using default automation stitch- Secret Credential View
    • Using the Secret Credential View automation stitch
    • Results
  • Customizing an automation stitch
    • Creating an automation trigger
    • Create an action
    • Creating a stitch
    • Results
• Windows application filter
  • Creating a Windows application filter to prevent running executables
    • Setting up WinRM on the remote server
    • Creating a target with server information as Windows
    • Creating a Windows application filter profile
    • Creating a privileged account secret
    • Creating a non-privileged account
    • Launching the secret
  • Creating a non-Windows application filter to prevent running executables
    • Creating a target with server information as non-Windows
    • Creating a non-privilged secret
• Web launcher
  • Using web launcher to auto fill credentials on a website
    • Creating a secret template
    • Creating a secret to connect to FortiAuthenticator
    • Launching the secret
• Log and video disks
  • Back up and restore your log and video files
    • Enabling maintenance mode on FortiPAM
    • Backing up videos to the FTP server
    • Backing up logs to the FTP server
    • Shutting down the FortiPAM-VM and change log and video disks
    • Restoring videos from the FTP server
    • Restoring logs from the FTP server
• Certificate management
  • Configuring certificate using the ACME protocol to access a FortiPAM instance
    • Creating a certificate
    • Configuring the FortiPAM SSL certificate
• Change Log