好康搬運工

登入Fortigate CLI

允許2FA透過Email派發
config user local
edit "Carmen"
set type password
set two-factor email
set email-to "carmen@nasa.gov"
next
end

增加token存活時間
config system global
set two-factor-email-expiry <30-300>
next
end

增加user輸入token時間
config system global
set remoteauthtimeout <1-300>

登入到GUI的用戶與設備中的用戶認證，將兩階段認證開啟，並選擇基於電子郵件的雙因子身份認證

2FA Token送至Email，輸入FortiClient即可完成SSL連結

https://www.reddit.com/r/fortinet/comments/o3tnz8/twofactor_authentication_ssl_vpn_fortigate/