FortiGate: Añadir doble verificación mail y configurar bookmark

Si necesitamos añadir un bookmark a un usuario a su SSL-VPN tenemos que hacerlo vía línea de comandos.

Seguiremos estos pasos:

# FG29 # config vpn ssl web user-bookmark 
 
# FG29 (user-bookmark) # edit luis
 
# FG29 (luis) # config bookmarks 
 
# FG29 (bookmarks) # edit RDP_Luis
 
# FG29 (RDP_Luis) # set apptype rdp
 
# FG29 (RDP_Luis) # set description PC_Luis
 
# FG29 (RDP_Luis) # set host 110.11.15.2
 
# FG29 (RDP_Luis) # set port 3389
 
# FG29 (RDP_Luis) # end
 
# FG29 (luis) # show
config vpn ssl web user-bookmark
    edit "luis"
        config bookmarks
            edit "RDP_Luis"
                set apptype rdp
                set description "PC_Luis"
                set host "110.11.15.2"
                set port 3389
            next
        end
    next
end

# FG29 # config vpn ssl web user-bookmark

# FG29 (user-bookmark) # edit luis

# FG29 (luis) # config bookmarks

# FG29 (bookmarks) # edit RDP_Luis

# FG29 (RDP_Luis) # set apptype rdp

# FG29 (RDP_Luis) # set description PC_Luis

# FG29 (RDP_Luis) # set host 110.11.15.2

# FG29 (RDP_Luis) # set port 3389

# FG29 (RDP_Luis) # end

# FG29 (luis) # show

config vpn ssl web user-bookmark

edit "luis"

config bookmarks

edit "RDP_Luis"

set apptype rdp

set description "PC_Luis"

set host "110.11.15.2"

set port 3389

end

Doble Verificación:

# FG117369 # config user local
 
# FG117369 (local) # edit luis
 
# FG111369 (luis) # set email-to 65111226@email_sms.net
 
# FG111111 (luis) # set two-factor email
 
# FG111111 (luis) # show
config user local
    edit "luis"
        set type ldap
        set two-factor email
        set email-to "651111226@email_sssm.net"
        set ldap-server "LDAP_ServidorX"
    next
end

# FG117369 # config user local

# FG117369 (local) # edit luis

# FG111369 (luis) # set email-to [email protected]_sms.net

# FG111111 (luis) # set two-factor email

# FG111111 (luis) # show

config user local

edit "luis"

set type ldap

set two-factor email

set email-to "[email protected]_sssm.net"

set ldap-server "LDAP_ServidorX"

end