Step 3: Enable the RADIUS client connection and define authentication requirements. Provide the port number in which the CyberArk Identity Connector talks to CyberArk Identity. Confirm with your network administrator that your corporate firewall rules are not blocking this connection, for example if your VPN server is in the DMZ. Your VPN server and the connector must be able to communicate. Select an existing connector or add a new one that you would like to accept RADIUS connections for VPN authentication for Fortinet FortiGate VPN.Ĭlick RADIUS and select the Enable incoming RADIUS connections checkbox. In the Admin Portal, click Settings > Network > CyberArk Identity Connector. Step 2: Configure the CyberArk Identity Connector to be a RADIUS server. The keys must match to enable authentication. If you have entered a secret key on your RADIUS client, then enter that same key here. In the RADIUS Client Settings window, fill in the following fields: RADIUS Client SettingĮnter a unique name such as FortiGate VPN.Įnter the hostname or IP address of the FortiGate appliance.Įnter the shared secret key for the RADIUS client and CyberArk Identity. Click Authentication > RADIUS Connections > Client > Add to configure your RADIUS client.Log in to the CyberArk Identity Admin Portal.Step 1: Define Fortinet FortiGate VPN as a RADIUS client in the CyberArk Identity Admin Portal.

In the following procedures your Fortinet FortiGate VPN is the RADIUS client and the CyberArk Identity Connector is the RADIUS server.

Integrate CyberArk Identity with Fortinet FortiGate VPN via RADIUS

You need an active Fortinet account that has administrator rights for your organization. This topic describes how to integrate CyberArk Identity with your Fortinet FortiGate VPN via RADIUS to add multi-factor authentication (MFA) to VPN logins. MFA for Fortinet FortiGate VPN via RADIUS

Fortinet vpn client