Fortinet FortiToken Mobile FTM Software License Key - Perpetual ( Electronic Delivery ) (Lead Time 1-2 Weeks)

OVERVIEW

Fortinet FortiToken Mobile (FTM), Mobile OTP, helps prevent breaches that occur due to compromised user accounts and passwords by increasing the certainty of the identiy of users attempting to access resources. To achieve multi-factor authentication (MFA), FortiToken integrates with FortiAuthenticator and FortiGate Next-Generation Firewalls and is part of the Fortinet Identity and Access Management (IAM) solution.

HIGHLIGHTS

Convenient, Strong Authentication

FortiToken is the client component of the Fortinet highly secure, simple to use and 
administer, and cost-effective multi-factor solution for meeting strong authentication needs. This application makes Android, iOS, and Windows mobile devices behave like a hardware based OTP token without the hassle of having to carry yet another device. Push notification shows details on the mobile device to approve or deny with one tap. Alternatively, hardware-based OTP tokens can be used to prevent user passwords from 
being stolen via phishing, dictionary, and brute-force attacks

Ultra-Secure Token Provisioning

FortiToken Mobile is simple to use and administer and provision for the system administrator. The token seeds are generated dynamically, minimizing online exposure. Binding the token to the device is enforced and the seeds are always encrypted at rest and in motion

Privacy and Control

FortiToken Mobile cannot change settings on a phone, take pictures or video, record or transmit audio, or read or send emails. Further, it cannot see browser history, and it requires permission to send notifications or to change any settings.
Additionally, FortiToken Mobile cannot remotely wipe a phone. Any visibility FortiToken Mobile requires is to verify the OS version to determine app version compatibility.
While FortiToken Mobile cannot change any settings without permission, the following 
permissions are relevant to FortiToken Mobile operations:

• Access to camera for scanning QR codes for easy token activation
• TouchID/FaceID used for app security
• Access to the internet for communication to activate tokens and receive push notifications
• “Send Feedback by Email” to automatically populate the “Sender” field
• Internally share files between applications to prepare an attachment to be sent by email for “Send Feedback by Email”
• FortiToken must keep the phone awake while it is upgrading the internal database to avoid data corruption

Leverages Existing Fortinet Platforms

Besides offering out-of-the-box interoperability with any time-based OATH-compliant 
authentication server such as FortiAuthenticator, FortiToken can also be used directly with 
FortiGate Next-Generation Firewalls, including with high availability configurations.

FortiGate has an integrated authentication server for validating the OTP as the second 
authentication factor for SSL VPN, IPsec VPN, captive portal, and administrative login. This 
method eliminates the need for the external RADIUS server that is typically required when 
implementing multi-factor solutions

Online Activation with FortiGuard®

FortiToken tokens can be activated online directly from FortiGate or FortiAuthenticator using the FortiGuard Center. This process maintains token seeds in a managed service repository. Once the seeds are activated, they can no longer be accessed from FortiGuard, ensuring they are safe from compromise. Alternatively, Fortinet offers an encrypted activation CD solution.

ADVANTAGES

• Unique token provisioning service via FortiGuard™ minimizes provisioning overhead and ensures maximum seed security
• Perpetual token license and unlimited device transfers eliminate annual subscription fees
• Scalable solution leveraging existing end-user devices offers low entry cost and
• TCO  Reduces costs and complexity by using an existing FortiGate as the two-factor authentication server
• Zero footprint solution

MAIN FEATURES

• OATH time- and event-based OTP generator
• Login details pushed to phone for one-tap approval 
• Mobile Application Security Certified (v3.1) for Android and iOS devices
• Patented cross platform token transfer 
• PIN/Fingerprint protected application 
• Copy OTP to the clipboard § OTP time-interval display 
• Serial number display 
• Token and app management
• Self-erase brute-force protection
• Apple watch compatibility

SUPPORTED PLATFORMS

• iOS (iPhone, iPod Touch, iPad), Android, Windows Phone 8, 8.1, Windows 10, and Windows Universal Platform
• WiFi-only devices supported (for over-the-air token activation)

RESOURCES

Datasheet

SPECIFICATIONS

• Onboard Security Algorithm - OATH time and event based OTP generator
• OTP Spec - RFC 6238, RFC 4226
• Supported Platforms - iOS (iPhone, iPod Touch, iPad, iWatch), Android, Windows 10 and Windows 11
• Over-the-Air Token Activation - WiFi-only devices supported
• One-Tap Approval - Login details pushed to phone
• PIN/Fingerprint/Facial Security 
• Serial Number Display 
• Token and App Management 
• Self-Erase Brute-Force Protection

HOW TO INSTALL AND CONFIGURE FORTINET FORTI-TOKEN 

ORDERING OPTIONS

FortiToken Mobile  Electronic license certificate

 (Lead Time 5-7 Working Days )