Which firewall authentication methods does FortiGate support? (Choose three.)

FortiGate firewalls provide a flexible and robust set of user authentication methods. These include creating user accounts directly on the device (local password authentication), which is suitable for small-scale deployments. For enterprise environments, FortiGate integrates with external identity servers like RADIUS, LDAP, and TACACS+ for server-based password authentication. To enhance security, FortiGate natively supports two-factor authentication (2FA), most commonly implemented using FortiToken (hardware, mobile, or cloud-based) or third-party tokens, adding an essential layer of verification for user access.

B. Biometric authentication: FortiGate does not directly process biometric data. Biometrics may be used on a client device to unlock a second factor, but the method itself is classified as 2FA.
C. Out-of-band authentication: This is a general security concept, not a specific, configurable authentication method within FortiOS. Methods like 2FA may use out-of-band channels, but are configured as 2FA.

1. FortiOS 7.0 Administration Guide

Fortinet Document Library.

Section: User & Authentication > User Definition > Local users (p. 1018): Details the creation and management of user accounts stored locally on the FortiGate device. This supports option A.

Section: User & Authentication > User Definition > Remote users (p. 1021): Describes configuring FortiGate to authenticate users against remote servers

including RADIUS

LDAP

and TACACS+. This supports option D.

Section: User & Authentication > Two-factor authentication (p. 1051): Provides a comprehensive overview of configuring and applying two-factor authentication methods

including FortiTokens and email/SMS tokens. This supports option E.

2. Fortinet Cookbook

"User Authentication" section.

Article: "Firewall authentication with local users": Provides a step-by-step guide for setting up local user accounts and firewall policies for authentication

confirming the viability of local password authentication.

Article: "LDAP user authentication": Demonstrates the integration of FortiGate with an LDAP server for user authentication

a primary example of server-based password authentication.

Article: "Two-factor authentication with FortiToken Mobile": Illustrates the configuration process for adding a second layer of security using FortiToken

confirming support for two-factor authentication.