FortiAuthenticator 6.1.1

The following list contains new and expanded features added in FortiAuthenticator 6.1.1.

SAML IdP: 0365 Azure/ADFS hybrid support

To better support O365 Azure/ADFS hybrid environments, a new LDAP/ms-DS-ConsistencyGuid option is available in the Subject NameID dropdown in Authentication > SAML IdP > Service Providers when adding or editing a service provider.

HA: Failover sensitivity settings

This feature offers the ability to adjust the default HA failover parameters when a FortiAuthenticator is configured as an HA active cluster member:

• Heartbeat interval: Number of milliseconds between each HA heartbeats sent to the other cluster member. The default value is 1000 milliseconds.
• Heartbeat lost threshold: Number of consecutive heartbeats from the other active cluster member that must be missed before declaring it out-of-service. The standby unit uses this measure to trigger a failover. The default value is 6.

You can modify these settings at System > Administration > High Availability or in the CLI.

FTM: Hosted Push Proxy server for FortiToken Mobile push

FortiAuthenticator now sends the FortiToken Mobile push request to a FortiGuard/FortiCloud push proxy.

In order to support the FTM push feature, FortiAuthenticator must be able to reach push.fortinet.com over TCP/443.