Cisco ACS5.2 authentication with Fortigate Firewall

[asadhasan]

Hi All,

I am trying to configure Fortigate firewall for device authentication through TACACS+ using Cisco ACS 5.2.

I was wondering if any one had an experience to worked on this scenario. I am looking for authorization command attibute to grant admin access.

Please share some documentation or command guides.

Apprecaite for your quick response.

Thank you,

Asad

[Jatin Katyal]

You need to add the fortinet dictionary on the ACS

http://ccie8389.blogspot.in/2007/09/fortinet-vsa-for-radius.html

Here is a sample screen shot

Add all the attribute like we did above.

After that defined the value for the attributes in the policy elements.

once done, call this under access-policy > authorization rule.

let me know if you have any questions.

Jatin Katyal
- Do rate helpful posts -

[knightr]

Hi,

This is great, but there seems to be some steps missing here in your tutorial.  Specifically in the last step where you add all the items from the dictionary to the Authorization Profile.  Which items go into the profile and what goes in the "Attribute Value" field for each item?

Thanks,

Ray

[devkapil1982]

Hello Friends,

As i am going to implement remote VPN users authenticate via CISCO ACS(5.5) RADIUS (Local Database) server. My remote VPN BOX is fortigate. 

But i dont have what setting i will have to do on cisco ACS Side to enable radius and successful authentication of VPN Users. please help me. if possible please share Screen shot view.

Apprecaite for your quick response.

Thanks You

Kapil