Fortigate 2FA with e-mail

登入Fortigate CLI

允許2FA透過Email派發
config user local
edit "Carmen"
set type password
set two-factor email
set email-to "[email protected]"
next
end

增加token存活時間
config system global
set two-factor-email-expiry <30-300>
next
end

增加user輸入token時間
config system global
set remoteauthtimeout <1-300>

登入到GUI的用戶與設備中的用戶認證，將兩階段認證開啟，並選擇基於電子郵件的雙因子身份認證

2FA Token送至Email，輸入FortiClient即可完成SSL連結