can MFA be applied on above use cases like RDP/SSH?
@spyrule
4 ай бұрын
Great tutorial btw, just pointing out, you should never use ports below 1024 (822 for example is reserved for Mac OS X RPC-based services).
@cybersec3306
4 ай бұрын
Thanks for pointing this out
@MG-pf9xf
5 ай бұрын
Hi. Thanks for sharing. I did the same way but getting internal connection error when doing rdp. Forti tech suggested to use proxy policy instead of normal firewall policy with ztna enabled.
@spyrule
4 ай бұрын
Is it possible to do SMB through the ZTNA? So far I've been unsuccessful in getting it to work.
@cybersec3306
4 ай бұрын
I haven't tried this scenario but came across this document docs.fortinet.com/document/fortigate/7.4.1/administration-guide/553746/ztna-access-proxy-with-kdc-to-access-shared-drives
@MG-pf9xf
5 ай бұрын
Do the remote user have to give external ip always in order to access internal resources or its just for 1 time for installing certificate?
@cybersec3306
5 ай бұрын
You will need to have a remote user be able to reach the EMS on port, i believe 8013. As far as i know, remote users to access internal resources they need to hit a publicly accessible IP address not just for 1 time
@jonathanchen3201
5 ай бұрын
Hi I need to integrate ZTNA using 2FA with FortiToken 400 do you have any idea?
@cybersec3306
5 ай бұрын
Found this article that might help community.fortinet.com/t5/Support-Forum/ZTNA-with-2FA/td-p/215662
Пікірлер: 12