Internet access and network is a key for practically every function with the business; nevertheless, this requirement must be balanced with the danger it brings. The key aim of every business is to supply restricted although secure network access enabling the right person the appropriate accessibility at the perfect time, without compromising on security.
FortiAuthenticator contains password recovery features and user self registration, to streamline local user management. In a network which uses RADIUS authentication, e.g. wireless or VPN authentication, RADIUS Accounting can be used as an user identification procedure. This info is used to activate user login and to provide group info and IP, removing the need for a second tier of authentication.
FortiAuthenticator user identity management appliances reinforce business security by simplifying and centralizing the management and storage of user identity information used for authentication designed as a central repository for user validation tips FortiAuthenticator empowers multiple authentication technologies for controlling user access including two factor authentication identity verification and network access control.
FortiAuthenticator widens two factor authentications competent to multiple FortiGate appliances and to third party alternatives that support RADIUS or LDAP authentication. FortiAuthenticator can be used when adding strong authentication to your network. FortiAuthenticator has more alternatives, like FSSO (Fortinet Single Sign On) in conjunction with a FortiGate firewall. Fortinet Single Sign On is the method of supplying safe identity and role based access to the Fortinet network that is linked. Two factors authentication can be used to control access to applications like FortiGate management, SSL and IPSEC VPN, Wireless Captive Portal login, third party networking gear and sites.
When an user login is found, the username, IP and group details are entered into the FortiAuthenticator User Identity Management Database and according to the local policy, can be shared with multiple FortiGate apparatus. For complicated distributed domain structures where polling of domain controllers isn’t possible or desired, an option is the FortiAuthenticator SSo Client. Dispersed as part of FortiClient or as a standalone installation for Windows PCs, the client communicates login, IP stack changes(wired, wireless, wireless network roaming) and logout events to the FortiAuthenticator, removing the need for polling procedures.