FAC-2000E -- IDENTITY MANAGEMENT

• Enables identity and role-based security policies in the Fortinet secured enterprise network without the need for additional authentication through integration with Active Directory
• Strengthens enterprise security by simplifying and centralizing the management of user identity information
• RADIUS and LDAP authentication

FortiAuthenticator user identity management appliances strengthen enterprise security by simplifying and centralizing the management and storage of user identity information.

• FSSO transparent user identification
  Zero impact for enterprise users.
• Integration with LDAP and AD for group membership
  Utilizes existing systems for network authorization information, reducing deployment times and streamlining management processes. Integration with existing procedures for user management.
• Wide range of user identification methods
  Flexible user identification methods for integration with the most diverse of enterprise environments.
• Enablement of identity and role-based security
  Allows security administrator to give users access to the relevant network and application resources appropriate to their role, while retaining control and minimizing risk.
• RADIUS and LDAP user authentication
  Local authentication database with RADIUS and LDAP interfaces centralizes user management.
• Wide range of strong authentication methods
  Strong authentication provided by FortiAuthenticator via hardware tokens, e-mail, SMS, e-mail and digital certificates help to enhance password security and mitigate the risk of password disclosure, replay or brute forcing.
• User self-registration and password recovery
  Reduces the need for administrator intervention by allowing the user to perform their own registration and resolve their own password issues, which also improves user satisfaction.
• Certificate management
  Streamlined certificate management enables rapid, cost-effective deployment of certificate based authentication methods such as VPN.
• 802.1X authentication
  Deliver enterprise port access control to validate users connection to the LAN and wireless LAN to prevent unauthorized access to the network.