Cookbook

• Certificate management
  • FortiAuthenticator as a Certificate Authority
    • Creating a new CA on the FortiAuthenticator
    • Installing the CA on the network
    • Creating a CSR on the FortiGate
    • Importing and signing the CSR on the FortiAuthenticator
    • Importing the local certificate to the FortiGate
    • Configuring the certificate for the GUI
    • Results
  • FortiAuthenticator Certificate with SSL Inspection
    • Creating a CSR on the FortiGate
    • Creating an Intermediate CA on the FortiAuthenticator
    • Importing the signed certificate on the FortiGate
    • Configuring full SSL inspection
    • Results
• FortiToken and FortiToken Mobile
  • FortiToken Mobile Push for SSL VPN
    • Adding a FortiToken to the FortiAuthenticator
    • Adding the user to the FortiAuthenticator
    • Creating the RADIUS client on the FortiAuthenticator
    • Connecting the FortiGate to the RADIUS server
    • Configuring the SSL VPN
    • Results
• Self-service Portal
  • FortiAuthenticator user self-registration
    • Creating a self-registration user group
    • Enabling self-registration
    • Creating a new SMTP server
    • Results - Self-registration
    • Results - Administrator approval
• VPNs
  • LDAP authentication for SSL VPN with FortiAuthenticator
    • Creating the user and user group on the FortiAuthenticator
    • Creating the LDAP directory tree on the FortiAuthenticator
    • Connecting the FortiGate to the LDAP server
    • Creating the LDAP user group on the FortiGate
    • Configuring the SSL VPN
    • Results
  • SMS two-factor authentication for SSL VPN
    • Creating an SMS user and user group on the FortiAuthenticator
    • Configuring the FortiAuthenticator RADIUS client
    • Configuring the FortiGate authentication settings
    • Configuring the SSL VPN
    • Creating the security policy for VPN access to the Internet
    • Results
• WiFi authentication
  • Assigning WiFi users to VLANs dynamically
    • Configuring the FortiAuthenticator
    • Adding the RADIUS server to the FortiGate
    • Creating an SSID with dynamic VLAN assignment
    • Creating the VLAN interfaces
    • Creating security policies
    • Creating the FortiAP profile
    • Connecting and authorizing the FortiAP
    • Results
  • WiFi using FortiAuthenticator RADIUS with certificates
    • Creating a local CA on FortiAuthenticator
    • Creating a local service certificate on FortiAuthenticator
    • Configuring RADIUS EAP on FortiAuthenticator
    • Configuring RADIUS client on FortiAuthenticator
    • Configuring local user on FortiAuthenticator
    • Configuring local user certificate on FortiAuthenticator
    • Creating RADIUS server on FortiGate
    • Creating WiFi SSID on FortiGate
    • Exporting user certificate from FortiAuthenticator
    • Importing user certificate into Windows 10
    • Configuring Windows 10 wireless profile to use certificate
    • Results
  • WiFi RADIUS authentication with FortiAuthenticator
    • Creating users and user groups on the FortiAuthenticator
    • Registering the FortiGate as a RADIUS client on the FortiAuthenticator
    • Configuring FortiGate to use the RADIUS server
    • Creating SSID and set up authentication
    • Connecting and authorizing the FortiAP
    • Creating the security policy
    • Results
  • WiFi with WSSO using FortiAuthenticator RADIUS and Attributes
    • Registering the FortiGate as a RADIUS client on the FortiAuthenticator
    • Creating users on the FortiAuthenticator
    • Creating user groups on the FortiAuthenticator
    • Configuring the FortiGate to use the FortiAuthenticator as the RADIUS server
    • Configuring user groups on the FortiGate
    • Creating security policies
    • Configuring the SSID to RADIUS authentication
    • Results
• LDAP Authentication
  • G Suite integration using LDAP
    • Generating the G Suite certificate
    • Importing the certificate to FortiAuthenticator
    • Configuring LDAP on the FortiAuthenticator
    • Troubleshooting
• Change Log