In the setup single sign on section, click ‘Get Started’. Note: Stop asking if you can use self signed certs – this one cost me six dollars! It needs to be publicly signed so Azure trusts it!Īdd and Configure the FortiGate SSL VPN Applicationįrom within your Azure tenancy, locate Enterprise applications and choose to add a new one.ĭo a search for Forti and you should see the FortiGate SSL VPN application, select it. You will need an Azure subscription (a trial one is fine), obviously a FortiGate firewall, and a publicly signed certificate for the firewall (see below). Note: You can of course Use Azure MFA With Microsoft NPS (RADIUS) Server but this would require an additional server. I’ve covered that in other articles anyway, (use the search box above!)Įssentially your firewall will redirect authentication (via SAML) to Azure when you attempt to connect either via the web or tunnelled with the FortiClient. This article does not cover enabling MFA in Azure, we are assuming you already have that enabled. Multi Factor Authentication: If you have MFA on your Azure accounts then that’s a big box ticked for your accreditations and digital liability insurance also. So if you want to provide a FortiGate/FortiClient SSL remote access VPN solution then securing it via Azure makes a lot of sense.

More and more people are using Azure as their primary identity provider, thanks in no small part to the massive success of Office/Windows 365.

Fortigate azure vpn