System
The System tab enables you to manage and configure the basic system options for the FortiAuthenticator unit. This includes the basic network settings to connect the device to the corporate network, the configuration of administrators and their access privileges, managing and updating firmware for the device, and managing messaging servers and services.
The System tab provides access to the following menus and sub-menus:
| Dashboard | Select this menu to monitor, and troubleshoot your FortiAuthenticator device. Dashboard widgets include: l System Information widget l System Resources widget l Authentication Activity widget l User Inventory widget l HA Status l License Information widget l Disk Monitor l Top User Lockouts widget |
| Network | Select this menu to configure your FortiAuthenticator interfaces and network settings. l Interfaces
l DNS l Static routing l Packet capture |
| Administration | Select this menu to configure administrative settings for the FortiAuthenticator device. l GUI access
l High availability l Firmware l Automatic backup l SNMP l Licensing l FortiGuard l FTP servers l Administration |
| Messaging | Select this menu to configure messaging servers and services for the FortiAuthenticator device. l SMTP servers l E-mail services l SMS gateways |
Dashboard
When you select the System tab, it automatically opens at the System > Dashboard page.
The Dashboard page displays widgets that provide performance and status information and enable you to configure some basic system settings. These widgets appear on a single dashboard.
The following widgets are available:
| System Information | Displays basic information about the FortiAuthenticator system including host name, DNS domain name, serial number, system time, firmware version, architecture, system configuration, current administrator, and up time.
From this widget you can manually update the FortiAuthenticator firmware to a different release. For more information, see System Information widget on page 25. |
| System Resources | Displays the usage status of the CPU and memory. For more information, see System Resources widget on page 29. |
| Authentication Activity | Displays a customizable graph of the number of logins to the device. For more information, see Authentication Activity widget on page 29. |
| User Inventory | Displays the numbers of users, groups, FortiTokens, FSSO users, and FortiClient users currently used or logged in, as well as the maximum allowed number, the number still available, and the number that are disabled.
For more information, see User Inventory widget on page 29. |
| HA Status | Displays whether or not HA is enabled. |
| License Information | Displays the device’s license information, as well as SMS information. For more information, see License Information widget on page 29. |
| Disk Monitor | Displays if RAID is enabled, and the current disk usage in GB. |
| Top User Lockouts | Displays the top user lockouts. For more information, see Top User Lockouts widget on page 30. |
Customizing the dashboard
The FortiAuthenticator system settings dashboard is customizable. You can select which widgets to display, where they are located on the page, and whether they are minimized or maximized.
To move a widget
Position your mouse cursor on the widget’s title bar, then click and drag the widget to its new location.
To add a widget
In the dashboard toolbar, select Add Widget, then select the name of widget that you want to show. Multiple widgets of the same type can be added. To hide a widget, in its title bar, select the Close icon.
To see the available options for a widget
Position your mouse cursor over the icons in the widget’s title bar. Options include show/hide the widget, edit the widget, refresh the widget content, and close the widget.
The following table lists the widget options.
| Show/Hide arrow | Display or minimize the widget. |
| Widget Title | The name of the widget. |
| Edit | Select to change settings for the widget.
This option appears only in certain widgets. |
| Refresh | Select to update the displayed information. |
| Close | Select to remove the widget from the dashboard. You will be prompted to confirm the action. To add the widget, select Widget in the toolbar and then select the name of the widget you want to show. |
To change the widget title
Widget titles can be customized by selecting the edit button in the title bar and entering a new title in the widget settings dialog box. Some widgets have more options in their respective settings dialog box.
To reset a widget title to its default name, simply leave the Custom widget title field blank.
The widget refresh interval can also be manually adjusted from this dialog box.
System Information widget
The system dashboard includes a System Information widget, which displays the current status of the FortiAuthenticator unit and enables you to configure basic system settings.
The following information is available on this widget:
| Host Name | The identifying name assigned to this FortiAuthenticator unit. For more information, see Changing the host name on page 26. |
| DNS Domain Name | The DNS domain name. For more information, see Changing the DNS domain name on page 27. |
| Serial Number | The serial number of the FortiAuthenticator unit. The serial number is unique to the FortiAuthenticator unit and does not change with firmware upgrades. The serial number is used for identification when connecting to the FortiGuard server. |
| System Time | The current date, time, and time zone on the FortiAuthenticator internal clock or NTP server. For more information, see Configuring the system time, time zone, and date on page 27. |
| Firmware Version | The version number and build number of the firmware installed on the FortiAuthenticator unit. To update the firmware, you must download the latest version from the Customer Service & Support portal at https://support.fortinet.com. Select Update and select the firmware image to load from your management computer. |
| Architecture | The architecture of the device, such as 32-bit. |
| System Configuration | The date of the last system configuration backup. Select Backup/Restore to backup or restore the system configuration. For more information, see Backing up and restoring the configuration on page 28. |
| Current Administrator | The name of the currently logged on administrator. |
| Uptime | The duration of time the FortiAuthenticator unit has been running since it was last started or restarted. |
| Shutdown/Reboot | Options to shutdown or reboot the device. When rebooting or shutting down the system, you have the option to enter a message that will be added to the event log explaining the reason for the shutdown or reboot. |
Changing the host name
The System Information widget will display the full host name.
To change the host name:
- Go to System > Dashboard.
- In the System Information widget, in the Host Name field, select Change. The Edit Host Name page opens.
- In the Host name field, type a new host name.
The host name may be up to 35 characters in length. It may include US-ASCII letters, numbers, hyphens, and underscores. Spaces and special characters are not allowed.
- Select OK to save the setting.
Have you seen FortiAthenticator or Fortigate, for that matter, configured to utilize a third-party sms authentication (i.e. SMSGlobal) for on-boarding a guest wireless user?
Our Wireless is third-party as well and not managed by Fortigate.
We want to required the guest wireless user to enter their phone #, then in turn, receive a sms message with a passcode that they would enter to complete the on-board process.
Lots of companies facilitate the SMS piece, however, If it integrates with either the Fortigate or FortiAuthenticator, then I am missing something.
Thanks!!
We have configured FortiGates to utilize other SMS providers (mostly verizon) for 2FA / authentication means.
Are you referring to 2FA onto the Fortigate itself?
This particular article is discussing the FortiAuthenticator which is a separate Appliance / VM for authentication needs
we have two fortiauth VMs, we tried to create HA with primary-slave configuration. the issue we were facing that primary fac can see the peer device on it with the error message cluster not formed but on slave unit it is not showing any peer device, on cluster status it is showing cluster is formed but in peer device section it is showing it is not.
by help of TAC we could find out that the heart beet can be seen on the primary FAC by the slave FAC but the HA heatbeat cannot be reached to primary FAC from slave.
Primary FAC VM is on ESXi server which is connected to cisco fabric switch > cisco core switch > other side fabric switch > slave FAC VM on other side ESXi server.
we did assign separate vlan for HA connectivity and that vlan is been configured on fabric switch as well as the core and it is L2 only. so nothing is blocking the heartbeat broadcast in between these two FACs and no firewall in between as well. Do you have any idea what would be the cause of this issue?