FORTINET (FTK-220-5) FortiToken Five pieces one-time password

Strong Authentication at Your Fingertips

OATH compliant Time-based One-Time Password (TOTP) tokens lets you solve Network Authentication Security problems affordably by adding a Second Factor for Strong Authentication. Relying solely on static passwords for remote access to your VPN and web sites provides only weak authentication, because your users' passwords are vulnerable to theft or guessing, as well as dictionary and brute-force attacks. To solve these problems you can deploy FortiToken.

Leverage Existing Fortinet Platforms

Besides offering out-of-the-box interoperability with any time-based OATH compliant authentication server, such as the FortiAuthenticator from Fortinet, the FortiToken can also be used directly with the FortiGate® consolidated security platform, including High Availability configurations. FortiGate has an integrated authentication server for validating the FortiToken as the second authentication factor for SSL VPN, IPSec VPN, Captive Portal and Administrative login, thereby eliminating the need for the external RADIUS server ordinarily required when implementing two-factor solutions.

Online Activation with FortiGuard®

You can activate your FortiToken tokens online directly from FortiGate or FortiAuthenticator using the FortiGuard® Center, which maintains your token seeds in a managed service repository. Once the seeds are activated, they can no longer be accessed from FortiGuard, ensuring that your seeds are safe from compromise. Alternatively, Fortinet also offers an encrypted activation CD solution.

• OATH
• TOTP
• SHA-1