FortiGate RAVPN + Cisco DUO 2FA

[Ib_Reda]

 Dears,

I have FortiGate as internet FW, I need to configure Cisco DUO as 2FA.

Any Guide step by step, please.

How intgrate FG with Cisco DUO and Cisco ISE?

How can I make an authorization policy on ISE and each user has own access policy?

Also, what is the difference between protecting an application for (Fortinet FortiGate vs Fortinet FortiGate Administrators)?

[DuoPablo]

Hi @Ib_Reda ,

We have the following documentation to configure Fortinet FortiGate SSL VPN with Duo, but if you plan to use ISE as your Duo point-of-integration, please refer to https://duo.com/docs/ciscoise-api. The latter will make it possible to have any RADIUS client device (such as FortiGate) authenticate with Duo when connecting to its RADIUS server, which would be ISE in this case. 

Duo has its own Policy engine, but for help with configuring ISE-specific policies, please reach out to the Cisco ISE community section. 

Configuring FortiGate VPN protects users logging into VPN. Configuring FortiGate Administrators protects administrator logins to the appliance. Please see the respective Duo SSO docs for further details regarding our SAML integration types for these: https://duo.com/docs/sso-fortinet-fortigate & https://duo.com/docs/sso-fortigate-admin
Hope this helps!