{"id":18613,"date":"2026-07-23T18:49:38","date_gmt":"2026-07-23T18:49:38","guid":{"rendered":"https:\/\/www.protectimus.com\/mfa-for-fortigate\/"},"modified":"2026-08-28T21:24:58","modified_gmt":"2026-08-28T21:24:58","slug":"mfa-for-fortigate","status":"publish","type":"page","link":"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/","title":{"rendered":"MFA para FortiGate: autenticaci\u00f3n de dos factores sin el coste de FortiToken"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"18613\" class=\"elementor elementor-18613 elementor-18346\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-223acb9 padded e-flex e-con-boxed e-con e-parent\" data-id=\"223acb9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e4740cc elementor-widget elementor-widget-heading\" data-id=\"e4740cc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">MFA para FortiGate: autenticaci\u00f3n de dos factores sin el coste de FortiToken<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b4a66c0 e-con-full e-flex e-con e-child\" data-id=\"b4a66c0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-0870f66 e-con-full e-flex e-con e-child\" data-id=\"0870f66\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e128a97 elementor-widget elementor-widget-text-editor\" data-id=\"e128a97\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">FortiGate es el firewall de nueva generaci\u00f3n m\u00e1s utilizado en el mercado empresarial, y a la vez, en los \u00faltimos cuatro a\u00f1os, una de las plataformas atacadas de forma m\u00e1s constante. La interfaz SSL VPN, la consola de administraci\u00f3n y el n\u00facleo de FortiOS han producido, cada uno, vulnerabilidades cr\u00edticas que los atacantes han explotado en cuesti\u00f3n de d\u00edas tras su divulgaci\u00f3n, en ocasiones antes incluso de que existieran parches..<\/span><\/p><p><span style=\"font-weight: 400;\">Las contrase\u00f1as por s\u00ed solas no protegen una VPN de FortiGate. Los ataques a credenciales documentados contra dispositivos Fortinet en 2024-2026 no requer\u00edan explotar vulnerabilidades: usaban nombres de usuario y contrase\u00f1as v\u00e1lidos obtenidos mediante phishing, credential stuffing o filtraciones de archivos de configuraci\u00f3n de dispositivos previamente comprometidos.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-20c72f6 elementor-widget elementor-widget-html\" data-id=\"20c72f6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<script type=\"application\/ld+json\">\r\n\r\n{\r\n\r\n  \"@context\": \"https:\/\/schema.org\",\r\n\r\n  \"@type\": \"BreadcrumbList\",\r\n\r\n  \"itemListElement\": [\r\n\r\n    {\"@type\": \"ListItem\", \"position\": 1, \"name\": \"Home\", \"item\": \"https:\/\/www.protectimus.com\/\"},\r\n\r\n    {\"@type\": \"ListItem\", \"position\": 2, \"name\": \"Solutions\", \"item\": \"https:\/\/www.protectimus.com\/solutions\/\"},\r\n\r\n    {\"@type\": \"ListItem\", \"position\": 3, \"name\": \"MFA for FortiGate\", \"item\": \"https:\/\/www.protectimus.com\/mfa-for-fortigate\/\"}\r\n\r\n  ]\r\n\r\n}\r\n\r\n<\/script>\r\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-42bfc14 e-con-full e-flex e-con e-child\" data-id=\"42bfc14\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6818e9e elementor-widget elementor-widget-heading\" data-id=\"6818e9e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">\u00cdndice<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-282e74f elementor-widget elementor-widget-text-editor\" data-id=\"282e74f\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"why-on-premise-mfa-matters-2026\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ol><li><a href=\"#why-fortigate-vpn-needs-mfa\"><span style=\"font-weight: 400;\">Por qu\u00e9 la VPN de FortiGate necesita MFA m\u00e1s all\u00e1 de las contrase\u00f1as<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#fortitoken-vs-third-party-mfa\"><span style=\"font-weight: 400;\">FortiToken frente a MFA de terceros: el coste real<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#how-protectimus-mfa-works\"><span style=\"font-weight: 400;\">C\u00f3mo funciona la MFA de Protectimus con FortiGate<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#what-you-can-protect\"><span style=\"font-weight: 400;\">Qu\u00e9 puede proteger<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#supported-authentication-methods\"><span style=\"font-weight: 400;\">M\u00e9todos de autenticaci\u00f3n compatibles<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#step-by-step-fortigate-mfa\"><span style=\"font-weight: 400;\">Paso a paso: MFA para FortiGate en 4 pasos<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#compliance\"><span style=\"font-weight: 400;\">Cumplimiento<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#faq\"><span style=\"font-weight: 400;\">Preguntas frecuentes<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#start-securing-fortigate\"><span style=\"font-weight: 400;\">Empiece a proteger FortiGate hoy mismo<\/span><\/a><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b904199 padded e-flex e-con-boxed e-con e-parent\" data-id=\"b904199\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-1b1c9bb e-con-full e-flex e-con e-child\" data-id=\"1b1c9bb\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f07f411 elementor-widget elementor-widget-heading\" data-id=\"f07f411\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Respuesta r\u00e1pida<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-54d9acf elementor-widget elementor-widget-text-editor\" data-id=\"54d9acf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p> Protectimus a\u00f1ade MFA al SSL VPN, IPsec VPN y al acceso administrativo de FortiGate a trav\u00e9s de un servidor RADIUS de Protectimus: apps TOTP y tokens hardware, SMS, chatbots y OTP por email, sin necesidad de licencias de FortiToken por usuario. Una implementaci\u00f3n est\u00e1ndar de una sola puerta de enlace se completa en un d\u00eda.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cdef92e padded e-flex e-con-boxed e-con e-parent\" data-id=\"cdef92e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-56c84d1 elementor-widget elementor-widget-heading\" data-id=\"56c84d1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Datos clave<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bff780b elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"bff780b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d391a8f e-grid e-con-boxed e-con e-child\" data-id=\"d391a8f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-64a96a2 border-left e-flex e-con-boxed e-con e-child\" data-id=\"64a96a2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4dfef98 elementor-widget elementor-widget-heading\" data-id=\"4dfef98\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">La MFA bloquea m\u00e1s del 99,2% de los ataques automatizados a credenciales<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0cc1bea elementor-widget elementor-widget-heading\" data-id=\"0cc1bea\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Microsoft<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f5e29e2 elementor-widget elementor-widget-text-editor\" data-id=\"f5e29e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">El Microsoft Digital Defense Report 2025 encontr\u00f3 que la MFA sigue siendo el control individual de mayor impacto contra las intrusiones basadas en credenciales, el tipo de ataque que apunta m\u00e1s directamente a los endpoints VPN de FortiGate. <\/span><span style=\"font-weight: 400;\">(<\/span><a target=\"_blank\" target=\"_blank\" href=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/cybersecurity\/microsoft-digital-defense-report-2025\/\"><span style=\"font-weight: 400;\">Microsoft Digital Defense Report<\/span><\/a><span style=\"font-weight: 400;\">)<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f5947b8 border-left e-flex e-con-boxed e-con e-child\" data-id=\"f5947b8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fa74c1f elementor-hidden-desktop elementor-hidden-tablet elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"fa74c1f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-47e43b7 elementor-widget elementor-widget-heading\" data-id=\"47e43b7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">26 CVE de Fortinet en el cat\u00e1logo CISA Known Exploited Vulnerabilities<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fb629a4 elementor-widget elementor-widget-heading\" data-id=\"fb629a4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">CISA<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8085769 elementor-widget elementor-widget-text-editor\" data-id=\"8085769\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">En julio de 2026, CISA hab\u00eda confirmado 26 vulnerabilidades de Fortinet explotadas activamente en el mundo real, m\u00e1s que cualquier otro proveedor de seguridad de red en el cat\u00e1logo. La m\u00e1s reciente, CVE-2025-59718 (CVSS 9.1), permit\u00eda a atacantes no autenticados eludir por completo el SSO de FortiCloud mediante mensajes SAML manipulados. CISA fij\u00f3 un plazo de parcheo de 7 d\u00edas al a\u00f1adirla al KEV. (<a target=\"_blank\" target=\"_blank\" href=\"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog?search_api_fulltext=fortinet\">CISA Known Exploited Vulnerabilities Catalog, July 2026<\/a>)<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c6c866e elementor-hidden-desktop elementor-hidden-tablet elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"c6c866e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5c0d1fa border-left e-flex e-con-boxed e-con e-child\" data-id=\"5c0d1fa\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d45db87 elementor-widget elementor-widget-heading\" data-id=\"d45db87\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">FortiGate SSL VPN: el dispositivo perimetral m\u00e1s explotado de 2024-2025<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-344d455 elementor-widget elementor-widget-heading\" data-id=\"344d455\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Fortinet<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a4d317 elementor-widget elementor-widget-text-editor\" data-id=\"3a4d317\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">CVE-2022-42475, CVE-2023-27997 y CVE-2024-21762 \u2014todas vulnerabilidades del SSL VPN de FortiOS\u2014 se encadenaron en una campa\u00f1a de persistencia de varios a\u00f1os en la que los atacantes mantuvieron acceso de solo lectura a las configuraciones de los dispositivos incluso despu\u00e9s de aplicar los parches. El actor de amenazas Mora_001 (vinculado a LockBit) explot\u00f3 CVE-2024-55591 y CVE-2025-24472 para obtener privilegios de superadministrador en dispositivos FortiGate expuestos a internet y desplegar ransomware. (Aviso PSIRT de Fortinet, abril de 2025; Alerta de CISA, abril de 2025; Forescout Vedere Labs, 2025)<br><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0ae1e9a padded e-flex e-con-boxed e-con e-parent\" data-id=\"0ae1e9a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e899921 elementor-widget elementor-widget-heading\" data-id=\"e899921\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Ventajas clave<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-86d1b8b elementor-widget elementor-widget-spacer\" data-id=\"86d1b8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9d5e935 e-grid e-con-full e-con e-child\" data-id=\"9d5e935\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-12e9470 e-con-full e-flex e-con e-child\" data-id=\"12e9470\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8644d62 elementor-widget elementor-widget-image\" data-id=\"8644d62\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"64\" height=\"64\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2025\/03\/key-5.svg\" class=\"attachment-full size-full wp-image-17649\" alt=\"On-Premise MFA Platform \u2013 Security feature: A Cluster-Based, Fault-Tolerant System\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-317cba7 elementor-widget elementor-widget-heading\" data-id=\"317cba7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Un \u00fanico servidor de MFA para toda su infraestructura de red<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d96a026 elementor-widget elementor-widget-text-editor\" data-id=\"d96a026\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>El mismo despliegue de Protectimus RADIUS puede proteger FortiGate junto con Cisco, Palo Alto, SonicWall, Check Point, Juniper, F5, Citrix ADC y otros sistemas compatibles con RADIUS.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-68b5ae8 e-con-full e-flex e-con e-child\" data-id=\"68b5ae8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8b57400 elementor-widget elementor-widget-image\" data-id=\"8b57400\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"56\" height=\"60\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2026\/05\/radius1.svg\" class=\"attachment-full size-full wp-image-16522\" alt=\"RADIUS MFA icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-767e2aa elementor-widget elementor-widget-heading\" data-id=\"767e2aa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Integraci\u00f3n RADIUS, sin licencias de FortiToken<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d73153e elementor-widget elementor-widget-text-editor\" data-id=\"d73153e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Protectimus se conecta a FortiGate como un servidor RADIUS est\u00e1ndar; no se requieren licencias de FortiToken por usuario ni un dispositivo FortiAuthenticator.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9d3b5b8 e-con-full e-flex e-con e-child\" data-id=\"9d3b5b8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-89d54f8 elementor-widget elementor-widget-image\" data-id=\"89d54f8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"57\" height=\"57\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2026\/05\/vpn2.svg\" class=\"attachment-full size-full wp-image-16525\" alt=\"VPN MFA icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f7f585d elementor-widget elementor-widget-heading\" data-id=\"f7f585d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">SSL VPN, IPsec VPN e inicio de sesi\u00f3n de administraci\u00f3n<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aff0db8 elementor-widget elementor-widget-text-editor\" data-id=\"aff0db8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Las tres v\u00edas de acceso de FortiGate quedan cubiertas desde una \u00fanica implementaci\u00f3n.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9ddacc7 e-con-full e-flex e-con e-child\" data-id=\"9ddacc7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-82d1654 elementor-widget elementor-widget-image\" data-id=\"82d1654\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"56\" height=\"56\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/03\/icon-shield-56.svg\" class=\"attachment-full size-full wp-image-17288\" alt=\"On-Prem MFA Platform icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb78c60 elementor-widget elementor-widget-heading\" data-id=\"eb78c60\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Soporte de tokens OTP hardware<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ee318b2 elementor-widget elementor-widget-text-editor\" data-id=\"ee318b2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Incluidos tokens NFC programables como alternativa directa a FortiToken 200.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cb9fab9 e-con-full e-flex e-con e-child\" data-id=\"cb9fab9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1b3c387 elementor-widget elementor-widget-image\" data-id=\"1b3c387\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"57\" height=\"56\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2026\/05\/plat_new.svg\" class=\"attachment-full size-full wp-image-16519\" alt=\"On-premise MFA platform icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-84c6048 elementor-widget elementor-widget-heading\" data-id=\"84c6048\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">On-premises o en la nube<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1abcc56 elementor-widget elementor-widget-text-editor\" data-id=\"1abcc56\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Implemente el servidor de Protectimus dentro del per\u00edmetro de su red o use el servicio en la nube.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7c15682 e-con-full e-flex e-con e-child\" data-id=\"7c15682\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ffb514c elementor-widget elementor-widget-image\" data-id=\"ffb514c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"56\" height=\"56\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/icon-check.svg\" class=\"attachment-full size-full wp-image-637\" alt=\"Customer Stories section icon \u2013 real-life client experiences\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3382fca elementor-widget elementor-widget-heading\" data-id=\"3382fca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Funciona con FortiClient<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-785b26a elementor-widget elementor-widget-text-editor\" data-id=\"785b26a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Flujo de autenticaci\u00f3n est\u00e1ndar de FortiClient, sin cambios en el lado del cliente.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-30a9584 elementor-widget elementor-widget-spacer\" data-id=\"30a9584\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5b50e5c padded e-flex e-con-boxed e-con e-parent\" data-id=\"5b50e5c\" data-element_type=\"container\" data-e-type=\"container\" id=\"why-fortigate-vpn-needs-mfa\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-28b1e56 e-con-full e-flex e-con e-child\" data-id=\"28b1e56\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a6f90e4 elementor-widget elementor-widget-heading\" data-id=\"a6f90e4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Por qu\u00e9 la VPN de FortiGate necesita MFA m\u00e1s all\u00e1 de las contrase\u00f1as<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9d2498b elementor-widget elementor-widget-text-editor\" data-id=\"9d2498b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">La interfaz SSL VPN de FortiGate ha producido m\u00e1s vulnerabilidades cr\u00edticas y activamente explotadas que casi cualquier otro producto de seguridad empresarial en los \u00faltimos a\u00f1os. CVE-2018-13379 filtr\u00f3 credenciales VPN de aproximadamente 50.000 dispositivos. CVE-2022-42475, CVE-2023-27997 y CVE-2024-21762 permit\u00edan la ejecuci\u00f3n remota de c\u00f3digo a trav\u00e9s del demonio SSL VPN sin necesidad de autenticaci\u00f3n. CVE-2024-55591 y CVE-2025-24472 otorgaban privilegios de superadministrador a trav\u00e9s de la interfaz WebSocket de gesti\u00f3n.<\/span><\/p><p><span style=\"font-weight: 400;\">El aviso de Fortinet de abril de 2025 describi\u00f3 directamente el resultado de esta cadena de vulnerabilidades: los atacantes creaban un enlace simb\u00f3lico entre el sistema de archivos de usuario de SSL VPN y el sistema de archivos ra\u00edz, manteniendo acceso de solo lectura a las configuraciones de los dispositivos \u2014incluidas las credenciales\u2014 incluso despu\u00e9s de parchear las vulnerabilidades originales. Las organizaciones que parchearon con prontitud segu\u00edan expuestas a la recolecci\u00f3n continua de credenciales desde sus propios dispositivos.<\/span><\/p><p><span style=\"font-weight: 400;\">Amazon Threat Intelligence document\u00f3 una campa\u00f1a independiente a principios de 2026: un actor de amenazas con motivaci\u00f3n econ\u00f3mica que usaba herramientas de IA comerciales para comprometer sistem\u00e1ticamente m\u00e1s de 600 dispositivos FortiGate en 55 pa\u00edses. El vector de acceso inicial se basaba en credenciales, no en la explotaci\u00f3n, y apuntaba a interfaces de gesti\u00f3n expuestas a internet.<\/span><\/p><p><span style=\"font-weight: 400;\">Parchear vulnerabilidades y mantener una buena higiene de credenciales es necesario, pero no suficiente. Un atacante con un nombre de usuario y contrase\u00f1a v\u00e1lidos \u2014procedentes de una campa\u00f1a de phishing, una lista de credenciales o un archivo de configuraci\u00f3n filtrado\u2014 elude cualquier defensa que dependa de parches aplicados. La MFA aplicada en la capa de autenticaci\u00f3n significa que una contrase\u00f1a robada por s\u00ed sola no puede abrir una sesi\u00f3n VPN.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d459193 padded e-flex e-con-boxed e-con e-parent\" data-id=\"d459193\" data-element_type=\"container\" data-e-type=\"container\" id=\"fortitoken-vs-third-party-mfa\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-9628165 e-con-full e-flex e-con e-child\" data-id=\"9628165\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5c8f824 elementor-widget elementor-widget-heading\" data-id=\"5c8f824\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">FortiToken frente a MFA de terceros: el coste real<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-de0ea10 elementor-widget elementor-widget-text-editor\" data-id=\"de0ea10\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Los productos de MFA nativos de Fortinet \u2014FortiToken Mobile, el token hardware FortiToken 200 y FortiAuthenticator\u2014 est\u00e1n dise\u00f1ados espec\u00edficamente para el ecosistema FortiGate y funcionan sin un servidor RADIUS independiente. Pero su modelo de licencias impone limitaciones operativas reales.<\/span><\/p><p><b>FortiToken Mobile <\/b><span style=\"font-weight: 400;\">requiere una licencia perpetua por usuario registrada en un dispositivo FortiGate concreto. Las licencias no son transferibles entre dispositivos (para licencias emitidas despu\u00e9s de agosto de 2025). Si tiene varias unidades FortiGate en distintas ubicaciones, necesita grupos de licencias independientes por dispositivo, a menos que centralice la gesti\u00f3n mediante FortiAuthenticator.<\/span><\/p><p><b>FortiToken 200<\/b><span style=\"font-weight: 400;\">( token hardware) es un dispositivo f\u00edsico OATH TOTP, tambi\u00e9n licenciado por unidad y vinculado a un dispositivo concreto. Sustituir tokens perdidos implica comprar nuevas licencias. Los archivos de semilla est\u00e1n cifrados y solo est\u00e1n disponibles a trav\u00e9s del soporte t\u00e9cnico de Fortinet.<\/span><\/p><p><b>FortiAuthenticator <\/b><span style=\"font-weight: 400;\">es un dispositivo independiente (f\u00edsico o virtual) que centraliza la gesti\u00f3n de tokens en varias unidades FortiGate. Resuelve el problema de licencias por dispositivo, pero a\u00f1ade complejidad de implementaci\u00f3n, coste de licencias y otro componente de infraestructura que mantener y parchear.<\/span><\/p><p><span style=\"font-weight: 400;\">La diferencia estructural con un enfoque de proxy RADIUS de terceros:<\/span><\/p><p> <\/p><table><thead><tr><th><p><b>Factor<\/b><\/p><\/th><th><p><b>FortiToken Mobile<\/b><\/p><\/th><th><p><b>FortiToken 200<\/b><\/p><\/th><th><p><b>Protectimus (RADIUS proxy)<\/b><\/p><\/th><\/tr><\/thead><tbody><tr><td><p><span style=\"font-weight: 400;\">Modelo de licencia<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Perpetua por usuario, por dispositivo<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Perpetua por unidad, por dispositivo<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Suscripci\u00f3n por usuario, independiente del dispositivo<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Transferencia de licencia<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No permitida (tras agosto de 2025)<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No permitida<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No aplicable<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Soporte multidispositivo<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Requiere FortiAuthenticator<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Requiere FortiAuthenticator<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Nativo: un servidor, varias puertas de enlace<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">M\u00e9todos de autenticaci\u00f3n compatibles<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">FortiToken Mobile (TOTP), FortiToken 200<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">FortiToken 200<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Apps TOTP, SMS, email, chatbots y tokens hardware compatibles con OATH (TOTP, HOTP y OCRA)<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Tokens programables<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">S\u00ed (Slim NFC y Flex)<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Cubre dispositivos que no son de Fortinet<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">S\u00ed: Cisco, Palo Alto, etc.<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Requiere un servidor de MFA adicional<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No (para un solo dispositivo)<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No (para un solo dispositivo)<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">S\u00ed (servidor de Protectimus)<\/span><\/p><\/td><\/tr><\/tbody><\/table><p> <\/p><p>El equilibrio es sencillo: FortiToken es m\u00e1s simple para una implementaci\u00f3n de un \u00fanico FortiGate con una base de usuarios estable. Protectimus resulta m\u00e1s rentable cuando tiene varias puertas de enlace FortiGate, infraestructura de red heterog\u00e9nea, requisitos de autenticaci\u00f3n m\u00e1s amplios (SMS, email, chatbots o tokens hardware OATH), o necesita proteger sistemas que no son de Fortinet con la misma implementaci\u00f3n de MFA.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-86abc7e padded e-flex e-con-boxed e-con e-parent\" data-id=\"86abc7e\" data-element_type=\"container\" data-e-type=\"container\" id=\"how-protectimus-mfa-works\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-f0f2e30 e-con-full e-flex e-con e-child\" data-id=\"f0f2e30\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-684bcff elementor-widget elementor-widget-heading\" data-id=\"684bcff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">C\u00f3mo funciona la MFA de Protectimus con FortiGate<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4b52e3d elementor-widget elementor-widget-text-editor\" data-id=\"4b52e3d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Protectimus se integra con FortiGate como un servidor de autenticaci\u00f3n RADIUS est\u00e1ndar. FortiGate se comunica con Protectimus igual que con cualquier servidor RADIUS est\u00e1ndar. Env\u00eda las solicitudes de autenticaci\u00f3n exactamente igual que lo har\u00eda con cualquier otro servidor RADIUS.\n<br\/><\/p>\n<h3>Flujo de autenticaci\u00f3n<br\/><\/h3>\n<div style=\"max-width: 620px; margin: 30px 0; font-family: Arial, sans-serif;\">\n  <div>\n\n    <div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.35) 0%, rgba(123,225,255,.18) 45%, rgba(123,225,255,0) 100%); text-align: center;\">\n      <strong>Usuario<\/strong><br\/><small>FortiClient \/ navegador<\/small>\n    <\/div>\n\n    <div style=\"width: 460px; text-align: center; margin: 8px 0;\">\n      <small style=\"color: #666;\">Introduce su usuario y contrase\u00f1a<\/small>\n<div style=\"width: 2px; height: 18px; background: #111; margin: 4px auto 0;\"><\/div>\n <div style=\"font-size: 13px; line-height: 10px;\">\u25bc<\/div>\n    <\/div>\n\n    <div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.35) 0%, rgba(123,225,255,.18) 45%, rgba(123,225,255,0) 100%); text-align: center;\">\n      <strong>FortiGate<\/strong><br\/><small>SSL VPN \/ IPsec VPN \/ inicio de sesi\u00f3n de administrador<\/small>\n    <\/div>\n\n     <div style=\"width: 460px; text-align: center; margin: 8px 0;\">\n<small style=\"color: #666;\">RADIUS Access-Request (usuario + contrase\u00f1a)<\/small>\n<div style=\"width: 2px; height: 18px; background: #111; margin: 4px auto 0;\"><\/div>\n <div style=\"font-size: 13px; line-height: 10px;\">\u25bc<\/div>\n <\/div>\n\n \n<div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.35) 0%, rgba(123,225,255,.18) 45%, rgba(123,225,255,0) 100%); text-align: center;\"><strong>Servidor RADIUS de Protectimus<\/strong><\/div>\n \n\n     <div style=\"width: 460px; text-align: center; margin: 8px 0;\">\n<div style=\"width: 2px; height: 18px; background: #111; margin: 0 auto;\"><\/div>\n <div style=\"font-size: 13px; line-height: 10px;\">\u25bc<\/div>\n <\/div>\n\n \n<div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.35) 0%, rgba(123,225,255,.18) 45%, rgba(123,225,255,0) 100%); text-align: center;\"><strong>Servicio en la nube de Protectimus<\/strong>\n<small>o Protectimus On-Premise Platform<\/small>\n\n<small>Valida las credenciales v\u00eda AD, LDAP u otro proveedor de autenticaci\u00f3n configurado<\/small><\/div>\n \n\n     <div style=\"width: 460px; text-align: center; margin: 8px 0;\">\n<small style=\"color: #666;\">Contrase\u00f1a v\u00e1lida: se devuelve un RADIUS Access-Challenge<\/small>\n<div style=\"width: 2px; height: 18px; background: #111; margin: 4px auto 0;\"><\/div>\n <div style=\"font-size: 13px; line-height: 10px;\">\u25bc<\/div>\n <\/div>\n\n \n<div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.35) 0%, rgba(123,225,255,.18) 45%, rgba(123,225,255,0) 100%); text-align: center;\"><strong>FortiGate<\/strong>\n<small>Solicita al usuario un OTP<\/small><\/div>\n \n\n     <div style=\"width: 460px; text-align: center; margin: 8px 0;\">\n<small style=\"color: #666;\">Se muestra el aviso de OTP<\/small>\n<div style=\"width: 2px; height: 18px; background: #111; margin: 4px auto 0;\"><\/div>\n <div style=\"font-size: 13px; line-height: 10px;\">\u25bc<\/div>\n <\/div>\n\n \n<div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.35) 0%, rgba(123,225,255,.18) 45%, rgba(123,225,255,0) 100%); text-align: center;\"><strong>Usuario<\/strong>\n<small>Introduce una contrase\u00f1a de un solo uso<\/small><\/div>\n \n\n     <div style=\"width: 460px; text-align: center; margin: 8px 0;\">\n<small style=\"color: #666;\">RADIUS Access-Request (OTP)<\/small>\n<div style=\"width: 2px; height: 18px; background: #111; margin: 4px auto 0;\"><\/div>\n <div style=\"font-size: 13px; line-height: 10px;\">\u25bc<\/div>\n <\/div>\n\n \n<div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.35) 0%, rgba(123,225,255,.18) 45%, rgba(123,225,255,0) 100%); text-align: center;\"><strong>Servidor RADIUS de Protectimus<\/strong><\/div>\n \n\n    <div style=\"width: 460px; text-align: center; margin: 8px 0;\">\n      <div style=\"width: 2px; height: 18px; background: #111; margin: 0 auto;\"><\/div>\n      <div style=\"font-size: 13px; line-height: 10px;\">\u25bc<\/div>\n    <\/div>\n\n    <div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.35) 0%, rgba(123,225,255,.18) 45%, rgba(123,225,255,0) 100%); text-align: center;\">\n      <strong>Servicio en la nube de Protectimus<\/strong><br\/><small>o Protectimus On-Premise Platform<\/small><br\/><br\/><small>Valida el OTP<\/small><br\/><br\/><small><strong>Devuelve RADIUS Access-Accept<\/strong><\/small>\n    <\/div>\n\n     <div style=\"width: 460px; text-align: center; margin: 8px 0;\">\n<small style=\"color: #666;\">RADIUS Access-Accept devuelto a FortiGate<\/small>\n<div style=\"width: 2px; height: 18px; background: #111; margin: 4px auto 0;\"><\/div>\n <div style=\"font-size: 13px; line-height: 10px;\">\u25bc<\/div>\n <\/div>\n\n \n<div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.60) 0%, rgba(123,225,255,.38) 45%, rgba(123,225,255,.08) 100%); text-align: center;\"><strong>FortiGate<\/strong>\n<small>Establece la sesi\u00f3n VPN o de administrador<\/small><\/div>\n \n\n  <\/div>\n<\/div>\n<br>\n<h3>Resumen de la configuraci\u00f3n en el lado de FortiGate<\/h3>\n<p>En el lado de FortiGate, la configuraci\u00f3n consta de tres componentes:<\/p>\n\n<p><b>Definici\u00f3n del servidor RADIUS.<\/b> A\u00f1ada Protectimus como servidor RADIUS en User &#038; Authentication \u2192 RADIUS Servers. Configure la IP del servidor, el secreto compartido y el m\u00e9todo de autenticaci\u00f3n (PAP). Aumente el tiempo de espera del servidor a al menos 30 segundos: el tiempo de espera predeterminado de 5 segundos provoca fallos de autenticaci\u00f3n cuando los usuarios tardan m\u00e1s en recuperar su OTP.<\/p>\n\n<p><b>Grupo de usuarios.<\/b> Cree o modifique un grupo de usuarios que haga referencia al servidor RADIUS de Protectimus como fuente de autenticaci\u00f3n remota. Las pol\u00edticas de SSL VPN y los perfiles de administrador har\u00e1n referencia a este grupo.<\/p>\n\n<p><b>Asignaci\u00f3n de la pol\u00edtica de SSL VPN \/ firewall.<\/b> Asigne el grupo de usuarios autenticado por RADIUS al portal de SSL VPN y a las pol\u00edticas de firewall correspondientes.<\/p>\n\n<p>Para la configuraci\u00f3n completa con comandos CLI y capturas de pantalla, consulte la <a href=\"https:\/\/www.protectimus.com\/es\/guides\/fortigate-vpn-2fa\/\">gu\u00eda completa de configuraci\u00f3n de FortiGate 2FA<\/a>.<\/p>\n<br><h3>Access-Challenge y modo Inline<\/h3>\n<p>FortiGate admite el Access-Challenge de RADIUS en su portal web de SSL VPN y en los clientes en modo t\u00fanel. Cuando se emite el Access-Challenge, FortiClient muestra al usuario un segundo campo de entrada de OTP tras aceptar la contrase\u00f1a.<\/p>\n\n<p>Para configuraciones donde challenge\/response genera problemas \u2014ciertas versiones de FortiClient o rutas de autenticaci\u00f3n IPsec\u2014, Protectimus admite el modo Inline: el usuario introduce la contrase\u00f1a y el OTP en un \u00fanico campo con un separador configurado (por ejemplo, MiContrase\u00f1a,123456). El servidor de Protectimus interpreta la entrada combinada y valida cada componente por separado.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-280411b padded e-flex e-con-boxed e-con e-parent\" data-id=\"280411b\" data-element_type=\"container\" data-e-type=\"container\" id=\"what-you-can-protect\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-2bd5d59 e-con-full e-flex e-con e-child\" data-id=\"2bd5d59\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-347cae5 elementor-widget elementor-widget-heading\" data-id=\"347cae5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Qu\u00e9 puede proteger<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3977085 elementor-widget elementor-widget-text-editor\" data-id=\"3977085\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Una \u00fanica implementaci\u00f3n de Protectimus RADIUS cubre todas las superficies de autenticaci\u00f3n de FortiGate:<\/span><\/p><p><b>SSL VPN <\/b><span style=\"font-weight: 400;\">\u2014 la v\u00eda principal de acceso remoto. Tanto la autenticaci\u00f3n del portal web (basada en navegador) como la del modo t\u00fanel (FortiClient) pasan por el servidor RADIUS. Es la superficie de mayor riesgo dado el historial de vulnerabilidades del SSL VPN.<\/span><\/p><p><b>IPsec VPN <\/b><span style=\"font-weight: 400;\">\u2014 configuraciones IPsec de sitio a sitio y de cliente a sitio que usan XAUTH o IKEv1\/IKEv2 con autenticaci\u00f3n RADIUS. Las implementaciones de IPsec que dependen \u00fanicamente de una clave precompartida no requieren autenticaci\u00f3n de usuario, pero las configuraciones que usan XAuth o EAP con RADIUS pueden autenticar usuarios a trav\u00e9s de Protectimus. Esto cubre a los trabajadores remotos que usan FortiClient con IPsec en modo t\u00fanel como alternativa al SSL VPN.<\/span><\/p><p><b>Inicio de sesi\u00f3n de administraci\u00f3n de FortiGate<\/b><span style=\"font-weight: 400;\">\u2014 la GUI de gesti\u00f3n (HTTPS) y el acceso administrativo por SSH. FortiOS admite la autenticaci\u00f3n RADIUS para las cuentas de administrador, permitiendo aplicar la misma MFA obligatoria a las sesiones administrativas que a los usuarios VPN. Las cuentas de administrador representan el objetivo de mayor valor: el acceso de superadministrador otorga control total sobre las reglas del firewall, la configuraci\u00f3n VPN y el registro.<\/span><\/p><p><b>Implementaciones de FortiClient EMS <\/b><span style=\"font-weight: 400;\">\u2014 las implementaciones de VPN gestionadas por FortiClient EMS pueden usar el mismo servidor RADIUS de Protectimus para la autenticaci\u00f3n.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a29b829 padded e-flex e-con-boxed e-con e-parent\" data-id=\"a29b829\" data-element_type=\"container\" data-e-type=\"container\" id=\"supported-authentication-methods\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-1dc9ec2 e-con-full e-flex e-con e-child\" data-id=\"1dc9ec2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-131348d elementor-widget elementor-widget-heading\" data-id=\"131348d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">M\u00e9todos de autenticaci\u00f3n compatibles<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5266633 elementor-widget elementor-widget-text-editor\" data-id=\"5266633\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"supported-mfa-methods\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<table><thead><tr><th><p><b>M\u00e9todo<\/b><\/p><\/th><th><p><b>Entrega<\/b><\/p><\/th><th><p><b>Ideal para<\/b><\/p><\/th><\/tr><\/thead><tbody><tr><td><p><a href=\"https:\/\/www.protectimus.com\/es\/token\/smart\/\"><b>TOTP mediante la app Protectimus SMART<\/b><\/a><\/p><\/td><td><p><span style=\"font-weight: 400;\">App autenticadora, c\u00f3digos de 30 segundos<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">La mayor\u00eda de usuarios empresariales con smartphone<\/span><\/p><\/td><\/tr><tr><td><p><a href=\"https:\/\/www.protectimus.com\/es\/token\/slim\/\"><b>Token hardware Slim NFC<\/b><\/a><\/p><\/td><td><p><span style=\"font-weight: 400;\">Token NFC programable en formato tarjeta (TOTP)<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Organizaciones que necesitan tokens hardware reutilizables; alternativa directa a FortiToken 200<\/span><\/p><\/td><\/tr><tr><td><p><a href=\"https:\/\/www.protectimus.com\/es\/token\/flex\/\"><b>Token hardware FLEX<\/b><\/a><\/p><\/td><td><p><span style=\"font-weight: 400;\">Token hardware NFC programable en formato llavero (TOTP)<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Organizaciones que necesitan tokens hardware reutilizables; alternativa directa a FortiToken 200<\/span><\/p><\/td><\/tr><tr>Tokens hardware<td><p><b><a href=\"https:\/\/www.protectimus.com\/es\/token\/two\/\">TWO<\/a> \/ <a href=\"https:\/\/www.protectimus.com\/es\/token\/shark\/\">SHARK<\/a> <\/b><\/p><\/td><td><p><span style=\"font-weight: 400;\">Tokens TOTP cl\u00e1sicos en formato llavero<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Usuarios sin smartphone; roles de alta seguridad<\/span><\/p><\/td><\/tr><tr><td><p><a href=\"https:\/\/www.protectimus.com\/es\/token\/sms\/\"><b>SMS OTP<\/b><\/a><\/p><\/td><td><p><span style=\"font-weight: 400;\">C\u00f3digo de 6 d\u00edgitos por SMS<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Usuarios sin smartphone o sin acceso fiable a internet<\/span><\/p><\/td><\/tr><tr><td><p><a href=\"https:\/\/www.protectimus.com\/es\/token\/mail\/\"><b>Email OTP<\/b><\/a><\/p><\/td><td><p><span style=\"font-weight: 400;\">C\u00f3digo de 6 d\u00edgitos por email<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Organizaciones que prefieren la entrega de OTP por correo electr\u00f3nico<\/span><\/p><\/td><\/tr><tr><td><p><a href=\"https:\/\/www.protectimus.com\/es\/token\/bot\/\"><b>Chatbot OTP<\/b><\/a><\/p><\/td><td><p><span style=\"font-weight: 400;\">OTP mediante Telegram, Viber o Facebook Messenger<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Organizaciones que buscan una alternativa c\u00f3moda y de bajo coste al SMS OTP<\/span><\/p><\/td><\/tr><\/tbody><\/table><p> <\/p><p><b>Nota sobre tokens hardware: <\/b><span style=\"font-weight: 400;\">el Protectimus Slim NFC y el Protectimus FLEX son tokens OATH TOTP programables, los equivalentes funcionales m\u00e1s cercanos a FortiToken 200, pero con una diferencia clave: la semilla puede reprogramarse. Cuando un usuario deja la organizaci\u00f3n, el token puede reasignarse y volver a registrarse en lugar de sustituirse. Cualquier token hardware compatible con OATH TOTP, HOTP u OCRA tambi\u00e9n funciona.<\/span><\/p><p><span style=\"font-weight: 400;\">Para el cat\u00e1logo completo de <\/span><a href=\"https:\/\/www.protectimus.com\/es\/tokens\/\"><span style=\"font-weight: 400;\">tokens TOTP hardware<\/span><\/a><span style=\"font-weight: 400;\">, consulte la p\u00e1gina de tokens.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-16797b4 padded e-flex e-con-boxed e-con e-parent\" data-id=\"16797b4\" data-element_type=\"container\" data-e-type=\"container\" id=\"step-by-step-fortigate-mfa\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-bb86bc5 e-con-full e-flex e-con e-child\" data-id=\"bb86bc5\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-891beb3 elementor-widget elementor-widget-heading\" data-id=\"891beb3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Paso a paso: MFA para FortiGate en 4 pasos<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d7f6098 elementor-widget elementor-widget-text-editor\" data-id=\"d7f6098\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Paso 1 \u2014 Implemente Protectimus. <\/b><span style=\"font-weight: 400;\">Elija el servicio en la nube de Protectimus o la On-Premise Platform. Instale y configure el servidor RADIUS de Protectimus dentro de su red. Para una implementaci\u00f3n on-premises, instale tanto la Protectimus On-Premise Platform como el servidor RADIUS de Protectimus, y a continuaci\u00f3n configure la sincronizaci\u00f3n con Active Directory o LDAP si es necesario. Consulte la p\u00e1gina de la <\/span><a href=\"https:\/\/www.protectimus.com\/es\/platform\/\"><span style=\"font-weight: 400;\">plataforma de MFA on-premises<\/span><\/a><span style=\"font-weight: 400;\"> para conocer los requisitos del sistema.<\/span><\/p><p><b>Paso 2 \u2014 A\u00f1ada Protectimus como servidor RADIUS en FortiGate<\/b>. <span style=\"font-weight: 400;\">En la interfaz web de FortiGate: <b>User &#038; Authentication \u2192 RADIUS Servers \u2192 Create New<\/b>. Introduzca la IP del servidor de Protectimus, configure un secreto compartido robusto, seleccione PAP como m\u00e9todo de autenticaci\u00f3n y establezca el tiempo de espera en 30 segundos. Pruebe la conexi\u00f3n para confirmar que la comunicaci\u00f3n RADIUS funciona.<\/span><\/p><p><b>Paso 3 \u2014 Configure el grupo de usuarios y la pol\u00edtica de autenticaci\u00f3n. <\/b><span style=\"font-weight: 400;\">Cree un grupo de usuarios que haga referencia al servidor RADIUS de Protectimus. Asigne este grupo al portal de SSL VPN, a la pol\u00edtica de modo t\u00fanel o al perfil de administrador, seg\u00fan corresponda. Para la MFA del inicio de sesi\u00f3n de administrador, edite la cuenta de administrador en <\/span><strong>System \u2192 Administrators <\/strong><span style=\"font-weight: 400;\">y configure la autenticaci\u00f3n para usar el grupo autenticado por RADIUS.<\/span> <\/p><p><b>Paso 4 \u2014 Registre a los usuarios y pruebe. <\/b><span style=\"font-weight: 400;\">Env\u00ede enlaces de autorregistro a un grupo piloto. Los usuarios registran su app autenticadora escaneando un c\u00f3digo QR, o reciben la asignaci\u00f3n de un token hardware. Pruebe el flujo completo: con\u00e9ctese v\u00eda SSL VPN, introduzca las credenciales, confirme que aparece el aviso de OTP, verifique que la sesi\u00f3n se establece correctamente. A continuaci\u00f3n, extienda el registro a toda la poblaci\u00f3n de usuarios.<\/span><\/p><p><span style=\"font-weight: 400;\">Para comandos CLI, notas espec\u00edficas sobre versiones de FortiOS y configuraci\u00f3n de IPsec, consulte la <\/span><a href=\"https:\/\/www.protectimus.com\/es\/guides\/fortigate-vpn-2fa\/\"><span style=\"font-weight: 400;\">gu\u00eda completa de configuraci\u00f3n de FortiGate 2FA<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a2442ac padded e-flex e-con-boxed e-con e-parent\" data-id=\"a2442ac\" data-element_type=\"container\" data-e-type=\"container\" id=\"compliance\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-d2891c1 e-con-full e-flex e-con e-child\" data-id=\"d2891c1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f2847f8 elementor-widget elementor-widget-heading\" data-id=\"f2847f8\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"howtosetup\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Cumplimiento<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-32a2622 elementor-widget elementor-widget-text-editor\" data-id=\"32a2622\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>PCI DSS v4.0 (Requisitos 8.4.2 y 8.4.3)<\/b><span style=\"font-weight: 400;\"><\/span><\/p><p><span style=\"font-weight: 400;\">El Requisito 8.4.3 exige MFA para todo acceso remoto al entorno de datos de titulares de tarjetas que se origine fuera de la red de la organizaci\u00f3n. Las conexiones SSL VPN e IPsec VPN de FortiGate hacia entornos que tocan sistemas de pago quedan directamente bajo este requisito. El Requisito 8.4.2 extiende los requisitos de MFA al acceso al entorno de datos de titulares de tarjetas, incluido el inicio de sesi\u00f3n de administrador en los dispositivos FortiGate que gestionan segmentos de red dentro del alcance.<\/span><\/p><p><b>NIST SP 800-63B (AAL2)<\/b><span style=\"font-weight: 400;\"><\/span><\/p> <p><span style=\"font-weight: 400;\">El Nivel de Garant\u00eda de Autenticador 2 exige dos factores de autenticaci\u00f3n distintos para el acceso a sistemas sensibles. El TOTP mediante app autenticadora o token hardware satisface AAL2: la contrase\u00f1a es el secreto memorizado y el token es el autenticador vinculado.<\/span><\/p><p><b>Directiva NIS2 (art\u00edculo 21)<\/b><span style=\"font-weight: 400;\"><\/span><\/p><p><span style=\"font-weight: 400;\">Las entidades esenciales e importantes de los estados miembros de la UE deben implementar MFA o autenticaci\u00f3n continua para el acceso a los sistemas de red e informaci\u00f3n. El acceso VPN de FortiGate a la infraestructura interna est\u00e1 expl\u00edcitamente dentro del alcance.<\/span><\/p><p><b>ISO\/IEC 27001:2022 (Annex A 8.5)<\/b><span style=\"font-weight: 400;\"><\/span><\/p><p><span style=\"font-weight: 400;\">Los controles de autenticaci\u00f3n segura se recomiendan expl\u00edcitamente para los escenarios de acceso remoto y de cuentas administrativas.<\/span><\/p><p><b>Requisitos de los seguros de ciberriesgo<\/b><span style=\"font-weight: 400;\"><\/span><\/p> <p><span style=\"font-weight: 400;\">La MFA en el acceso remoto \u2014en concreto VPN y RDP\u2014 se ha convertido en un requisito est\u00e1ndar de suscripci\u00f3n para las p\u00f3lizas de responsabilidad cibern\u00e9tica. El SSL VPN de FortiGate sin MFA se se\u00f1ala con frecuencia como hallazgo en las evaluaciones de seguridad previas a la contrataci\u00f3n y puede dar lugar a la denegaci\u00f3n de la p\u00f3liza o a primas considerablemente m\u00e1s altas. Demostrar la aplicaci\u00f3n de la MFA mediante RADIUS satisface directamente este requisito en la mayor\u00eda de las solicitudes de p\u00f3liza. Tras las campa\u00f1as de explotaci\u00f3n de FortiGate ampliamente difundidas de 2024-2025, algunas aseguradoras han empezado a exigir evidencia documentada de MFA en los dispositivos perimetrales como condici\u00f3n de renovaci\u00f3n, no solo de contrataci\u00f3n inicial.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a9cb282 padded e-flex e-con-boxed e-con e-parent\" data-id=\"a9cb282\" data-element_type=\"container\" data-e-type=\"container\" id=\"faq\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7659ffd elementor-widget elementor-widget-heading\" data-id=\"7659ffd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Preguntas frecuentes<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-dc81e4c e-con-full padded e-flex e-con e-child\" data-id=\"dc81e4c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-fb2596d e-con-full faq-container e-flex e-con e-child\" data-id=\"fb2596d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-412fa06 plus-right elementor-widget elementor-widget-n-accordion\" data-id=\"412fa06\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;all_collapsed&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6830\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6830\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> \u00bfSustituye Protectimus a FortiToken? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6830\" class=\"elementor-element elementor-element-ea1991a e-con-full e-flex e-con e-child\" data-id=\"ea1991a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8bad61c elementor-widget elementor-widget-text-editor\" data-id=\"8bad61c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">S\u00ed, sustituye a FortiToken como mecanismo de MFA para la autenticaci\u00f3n de FortiGate. Los usuarios se registran en Protectimus en lugar de en FortiToken y usan una app autenticadora o un token hardware compatible con Protectimus. No se requieren licencias de FortiToken.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6831\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6831\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> \u00bfNecesito FortiAuthenticator para usar Protectimus con FortiGate? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6831\" class=\"elementor-element elementor-element-b2bdc68 e-con-full e-flex e-con e-child\" data-id=\"b2bdc68\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f30747e elementor-widget elementor-widget-text-editor\" data-id=\"f30747e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">No. FortiAuthenticator es el servidor centralizado de gesti\u00f3n de MFA de Fortinet; se usa habitualmente para gestionar de forma centralizada la autenticaci\u00f3n FortiToken en varios dispositivos FortiGate. Protectimus funciona como un servidor RADIUS con el que FortiGate se comunica directamente, sin FortiAuthenticator en la cadena.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6832\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6832\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> \u00bfFunciona con FortiClient? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6832\" class=\"elementor-element elementor-element-0787040 e-con-full e-flex e-con e-child\" data-id=\"0787040\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9eb7aff elementor-widget elementor-widget-text-editor\" data-id=\"9eb7aff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">S\u00ed. FortiClient usa el flujo de autenticaci\u00f3n est\u00e1ndar del SSL VPN de FortiGate, que se enruta a trav\u00e9s de RADIUS. FortiGate env\u00eda la solicitud de autenticaci\u00f3n RADIUS a Protectimus, que aplica la MFA exactamente igual que para las conexiones del portal web. No se requiere ning\u00fan cambio de configuraci\u00f3n en FortiClient.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6833\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"4\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6833\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> \u00bfCubre tanto el SSL VPN como el IPsec VPN? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6833\" class=\"elementor-element elementor-element-b3373c0 e-con-full e-flex e-con e-child\" data-id=\"b3373c0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6ef49d2 elementor-widget elementor-widget-text-editor\" data-id=\"6ef49d2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">S\u00ed. Tanto las configuraciones de SSL VPN (portal web y modo t\u00fanel) como las de IPsec VPN con autenticaci\u00f3n de usuario admiten la autenticaci\u00f3n RADIUS en FortiGate. Un \u00fanico servidor RADIUS de Protectimus gestiona ambos casos.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6834\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"5\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6834\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> \u00bfExiste una opci\u00f3n de token hardware como alternativa a FortiToken 200? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6834\" class=\"elementor-element elementor-element-3e2c10e e-con-full e-flex e-con e-child\" data-id=\"3e2c10e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e1ee304 elementor-widget elementor-widget-text-editor\" data-id=\"e1ee304\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">S\u00ed. El Protectimus Slim NFC y el Protectimus FLEX son tokens OATH TOTP programables en formato tarjeta y formato llavero, funcionalmente equivalentes a FortiToken 200, pero reprogramables, lo que significa que estos modelos de token OTP pueden reasignarse a un nuevo usuario en lugar de sustituirse cuando un empleado abandona la empresa. Cualquier token hardware compatible con OATH TOTP, HOTP u OCRA tambi\u00e9n funciona.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6835\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"6\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6835\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> \u00bfQu\u00e9 ocurre si el servidor de MFA de Protectimus deja de funcionar? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6835\" class=\"elementor-element elementor-element-67bff32 e-con-full e-flex e-con e-child\" data-id=\"67bff32\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ed5da62 elementor-widget elementor-widget-text-editor\" data-id=\"ed5da62\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Configure un servidor RADIUS de Protectimus principal y otro secundario. El mecanismo de failover RADIUS de FortiGate cambia autom\u00e1ticamente al servidor secundario si el principal no responde dentro del tiempo de espera. En las implementaciones on-premises, ambos servidores deben ubicarse en hosts distintos, en zonas de disponibilidad o ubicaciones f\u00edsicas separadas.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6836\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"7\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6836\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> \u00bfPuede un \u00fanico servidor de Protectimus cubrir Cisco, Palo Alto o SonicWall junto con FortiGate? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6836\" class=\"elementor-element elementor-element-a41023b e-con-full e-flex e-con e-child\" data-id=\"a41023b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2a36881 elementor-widget elementor-widget-text-editor\" data-id=\"2a36881\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">S\u00ed. Protectimus funciona con clientes RADIUS est\u00e1ndar compatibles con RFC 2865. Una \u00fanica implementaci\u00f3n puede dar servicio simult\u00e1neamente a FortiGate, Cisco ASA\/FTD, Palo Alto GlobalProtect, SonicWall y otros servicios autenticados por RADIUS. Los usuarios se registran una sola vez y su token funciona en todas las puertas de enlace. Consulte <\/span><a href=\"https:\/\/www.protectimus.com\/es\/radius-authentication\/\"><span style=\"font-weight: 400;\">autenticaci\u00f3n RADIUS con MFA<\/span><\/a><span style=\"font-weight: 400;\"> y <\/span><a href=\"https:\/\/www.protectimus.com\/es\/mfa-for-vpn\/\"><span style=\"font-weight: 400;\">MFA para VPN<\/span><\/a><span style=\"font-weight: 400;\"> para conocer la arquitectura m\u00e1s amplia.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<script type=\"application\/ld+json\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"\\u00bfSustituye Protectimus a FortiToken?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"S\\u00ed, sustituye a FortiToken como mecanismo de MFA para la autenticaci\\u00f3n de FortiGate. Los usuarios se registran en Protectimus en lugar de en FortiToken y usan una app autenticadora o un token hardware compatible con Protectimus. No se requieren licencias de FortiToken.\"}},{\"@type\":\"Question\",\"name\":\"\\u00bfNecesito FortiAuthenticator para usar Protectimus con FortiGate?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. FortiAuthenticator es el servidor centralizado de gesti\\u00f3n de MFA de Fortinet; se usa habitualmente para gestionar de forma centralizada la autenticaci\\u00f3n FortiToken en varios dispositivos FortiGate. Protectimus funciona como un servidor RADIUS con el que FortiGate se comunica directamente, sin FortiAuthenticator en la cadena.\"}},{\"@type\":\"Question\",\"name\":\"\\u00bfFunciona con FortiClient?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"S\\u00ed. FortiClient usa el flujo de autenticaci\\u00f3n est\\u00e1ndar del SSL VPN de FortiGate, que se enruta a trav\\u00e9s de RADIUS. FortiGate env\\u00eda la solicitud de autenticaci\\u00f3n RADIUS a Protectimus, que aplica la MFA exactamente igual que para las conexiones del portal web. No se requiere ning\\u00fan cambio de configuraci\\u00f3n en FortiClient.\"}},{\"@type\":\"Question\",\"name\":\"\\u00bfCubre tanto el SSL VPN como el IPsec VPN?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"S\\u00ed. Tanto las configuraciones de SSL VPN (portal web y modo t\\u00fanel) como las de IPsec VPN con autenticaci\\u00f3n de usuario admiten la autenticaci\\u00f3n RADIUS en FortiGate. Un \\u00fanico servidor RADIUS de Protectimus gestiona ambos casos.\"}},{\"@type\":\"Question\",\"name\":\"\\u00bfExiste una opci\\u00f3n de token hardware como alternativa a FortiToken 200?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"S\\u00ed. El Protectimus Slim NFC y el Protectimus FLEX son tokens OATH TOTP programables en formato tarjeta y formato llavero, funcionalmente equivalentes a FortiToken 200, pero reprogramables, lo que significa que estos modelos de token OTP pueden reasignarse a un nuevo usuario en lugar de sustituirse cuando un empleado abandona la empresa. Cualquier token hardware compatible con OATH TOTP, HOTP u OCRA tambi\\u00e9n funciona.\"}},{\"@type\":\"Question\",\"name\":\"\\u00bfQu\\u00e9 ocurre si el servidor de MFA de Protectimus deja de funcionar?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Configure un servidor RADIUS de Protectimus principal y otro secundario. El mecanismo de failover RADIUS de FortiGate cambia autom\\u00e1ticamente al servidor secundario si el principal no responde dentro del tiempo de espera. En las implementaciones on-premises, ambos servidores deben ubicarse en hosts distintos, en zonas de disponibilidad o ubicaciones f\\u00edsicas separadas.\"}},{\"@type\":\"Question\",\"name\":\"\\u00bfPuede un \\u00fanico servidor de Protectimus cubrir Cisco, Palo Alto o SonicWall junto con FortiGate?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"S\\u00ed. Protectimus funciona con clientes RADIUS est\\u00e1ndar compatibles con RFC 2865. Una \\u00fanica implementaci\\u00f3n puede dar servicio simult\\u00e1neamente a FortiGate, Cisco ASA\\\/FTD, Palo Alto GlobalProtect, SonicWall y otros servicios autenticados por RADIUS. Los usuarios se registran una sola vez y su token funciona en todas las puertas de enlace. Consulte autenticaci\\u00f3n RADIUS con MFA y MFA para VPN para conocer la arquitectura m\\u00e1s amplia.\"}}]}<\/script>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7534fb4 elementor-widget elementor-widget-html\" data-id=\"7534fb4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<script type=\"application\/ld+json\">{\r\n  \"@context\": \"https:\/\/schema.org\",\r\n  \"@type\": \"HowTo\",\r\n  \"name\": \"How to Set Up MFA for Cisco AnyConnect with Protectimus\",\r\n  \"description\": \"Step-by-step setup of multi-factor authentication for Cisco AnyConnect VPN using Protectimus via RADIUS: platform setup, RADIUS Server installation and configuration, ASA\/Firepower AAA configuration, AnyConnect connection profile, and user enrollment. First authentication with MFA enforced is achievable within 2\u20134 hours for a standard single-domain deployment.\",\r\n  \"totalTime\": \"PT4H\",\r\n  \"estimatedCost\": {\r\n    \"@type\": \"MonetaryAmount\",\r\n    \"currency\": \"USD\",\r\n    \"value\": \"0\"\r\n  },\r\n  \"supply\": [\r\n    {\r\n      \"@type\": \"HowToSupply\",\r\n      \"name\": \"Cisco ASA or Firepower Threat Defense appliance with AnyConnect VPN configured\"\r\n    },\r\n    {\r\n      \"@type\": \"HowToSupply\",\r\n      \"name\": \"Active Directory, LDAP, or local user directory for primary credential validation\"\r\n    },\r\n    {\r\n      \"@type\": \"HowToSupply\",\r\n      \"name\": \"Linux or Windows server for the Protectimus RADIUS Server (or for the full On-Premise Platform)\"\r\n    },\r\n    {\r\n      \"@type\": \"HowToSupply\",\r\n      \"name\": \"Network connectivity: UDP 1812\/1813 between ASA and RADIUS Server\"\r\n    },\r\n    {\r\n      \"@type\": \"HowToSupply\",\r\n      \"name\": \"Administrative access to Cisco ASDM or Firepower Management Center (FMC)\"\r\n    }\r\n  ],\r\n  \"tool\": [\r\n    {\r\n      \"@type\": \"HowToTool\",\r\n      \"name\": \"Protectimus Cloud Service or Protectimus On-Premise Platform\"\r\n    },\r\n    {\r\n      \"@type\": \"HowToTool\",\r\n      \"name\": \"Protectimus RADIUS Server\"\r\n    },\r\n    {\r\n      \"@type\": \"HowToTool\",\r\n      \"name\": \"Cisco ASDM or Firepower Management Center (FMC)\"\r\n    },\r\n    {\r\n      \"@type\": \"HowToTool\",\r\n      \"name\": \"Protectimus SMART OTP app, hardware token (Slim NFC, TWO, FLEX, SHARK), or Protectimus BOT\"\r\n    }\r\n  ],\r\n  \"step\": [\r\n    {\r\n      \"@type\": \"HowToStep\",\r\n      \"position\": 1,\r\n      \"name\": \"Set up the Protectimus platform or cloud service\",\r\n      \"text\": \"Register at protectimus.com for the cloud service, or install the Protectimus On-Premise Platform on your infrastructure. In the platform, create a Resource representing the AnyConnect VPN integration and note your API URL, Login, and API Key \u2014 they are required for the RADIUS Server configuration.\",\r\n      \"url\": \"https:\/\/www.protectimus.com\/mfa-for-cisco-anyconnect\/#step-1\",\r\n      \"image\": \"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/07\/1.svg\"\r\n    },\r\n    {\r\n      \"@type\": \"HowToStep\",\r\n      \"position\": 2,\r\n      \"name\": \"Install and configure the Protectimus RADIUS Server\",\r\n      \"text\": \"Install the Protectimus RADIUS Server on a Linux host (recommended) or Windows server accessible from the ASA. Edit the radius.yml configuration file with your Protectimus API credentials, RADIUS shared secret, ASA client IP, LDAP\/AD connection parameters, and listening port (UDP 1812). Start the RADIUS service and confirm it is listening. Verify firewall rules allow UDP 1812 and 1813 from the ASA to the RADIUS Server.\",\r\n      \"url\": \"https:\/\/www.protectimus.com\/mfa-for-cisco-anyconnect\/#step-2\",\r\n      \"image\": \"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/07\/2.svg\"\r\n    },\r\n    {\r\n      \"@type\": \"HowToStep\",\r\n      \"position\": 3,\r\n      \"name\": \"Configure the Cisco ASA AAA Server Group\",\r\n      \"text\": \"In Cisco ASDM, navigate to Configuration \u2192 Remote Access VPN \u2192 AAA\/Local Users \u2192 AAA Server Groups. Add a new AAA Server Group named 'protectimus' with Protocol set to RADIUS. Set Accounting Mode to Single, Reactivation Mode to Depletion, Dead Time 10, Max Failed Attempts 3. Add the Protectimus RADIUS Server with its IP, authentication port 1816, accounting port 1815, timeout 10s, and the matching shared secret. For Cisco Firepower via FMC, the equivalent path is Objects \u2192 Object Management \u2192 RADIUS Server Group \u2192 Add Group with identical parameters.\",\r\n      \"url\": \"https:\/\/www.protectimus.com\/mfa-for-cisco-anyconnect\/#step-3\",\r\n      \"image\": \"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/07\/3.svg\"\r\n    },\r\n    {\r\n      \"@type\": \"HowToStep\",\r\n      \"position\": 4,\r\n      \"name\": \"Configure the AnyConnect VPN connection\",\r\n      \"text\": \"In Cisco ASDM, open Wizards \u2192 VPN Wizards \u2192 AnyConnect VPN Wizard. Configure the connection profile name, VPN access interface, enable SSL and IPsec, and select or generate a device certificate. Add AnyConnect client image (.pkg) files. In the Authentication Methods step, select the 'protectimus' AAA Server Group. In the SAML Configuration step, set Authentication Method to AAA, select the protectimus AAA Server Group, leave SAML Server as None. Configure the client IP address pool and DNS settings, enable 'Exempt VPN traffic from network address translation' and 'Allow Web Launch', then review and finish.\",\r\n      \"url\": \"https:\/\/www.protectimus.com\/mfa-for-cisco-anyconnect\/#step-4\",\r\n      \"image\": \"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/07\/4.svg\"\r\n    },\r\n    {\r\n      \"@type\": \"HowToStep\",\r\n      \"position\": 5,\r\n      \"name\": \"Enroll users and assign OTP tokens\",\r\n      \"text\": \"Add users to the Protectimus platform manually, via CSV import, or via LDAP sync with Active Directory. Assign tokens (Protectimus SMART OTP app, hardware tokens, or chatbot OTP) to users manually, or activate the Self-Service Portal so users can enroll and manage their own tokens. Run authentication tests with a pilot group before broader rollout.\",\r\n      \"url\": \"https:\/\/www.protectimus.com\/mfa-for-cisco-anyconnect\/#step-5\",\r\n      \"image\": \"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/07\/5.svg\"\r\n    }\r\n  ]\r\n}\r\n<\/script>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-fe2c5b0 padded e-flex e-con-boxed e-con e-parent\" data-id=\"fe2c5b0\" data-element_type=\"container\" data-e-type=\"container\" id=\"start-securing-fortigate\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-e4ec716 e-con-full e-flex e-con e-child\" data-id=\"e4ec716\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-35746bf e-con-full e-flex e-con e-child\" data-id=\"35746bf\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-489bd70 e-con-full e-flex e-con e-child\" data-id=\"489bd70\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-10cf0aa elementor-widget elementor-widget-heading\" data-id=\"10cf0aa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Empiece a proteger FortiGate hoy mismo<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6c0eeb4 elementor-widget elementor-widget-text-editor\" data-id=\"6c0eeb4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">FortiGate es un objetivo de gran valor. El historial de vulnerabilidades del SSL VPN y las campa\u00f1as basadas en credenciales documentadas entre 2024 y 2026 hacen que la autenticaci\u00f3n VPN basada \u00fanicamente en contrase\u00f1a sea un riesgo asumido dif\u00edcil de justificar ante auditores, aseguradoras o equipos de respuesta a incidentes a posteriori.<\/span><\/p><p><span style=\"font-weight: 400;\">Protectimus a\u00f1ade MFA a FortiGate en un d\u00eda, sin sustituir su puerta de enlace, sin licencias de FortiToken por usuario y sin FortiAuthenticator.<\/span><\/p><p><strong>Empiece gratis: hasta 10 usuarios m\u00e1s $25 en cr\u00e9dito de prueba. No se requiere tarjeta de cr\u00e9dito.<\/strong><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><a target=\"_blank\" target=\"_blank\" href=\"https:\/\/service.protectimus.com\/register\/\"><span style=\"font-weight: 400;\">Empezar gratis \u2192 service.protectimus.com<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.protectimus.com\/es\/platform\/\"><span style=\"font-weight: 400;\">Implementaci\u00f3n on-premises \u2192 Protectimus Platform<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.protectimus.com\/es\/guides\/fortigate-vpn-2fa\/\"><span style=\"font-weight: 400;\">Gu\u00eda de configuraci\u00f3n completa \u2192 Gu\u00eda de configuraci\u00f3n de FortiGate 2FA<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.protectimus.com\/es\/tokens\/\"><span style=\"font-weight: 400;\">Tokens hardware \u2192 Tokens de Protectimus<\/span><\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a3f81ec e-con-full contact-us-bg e-flex e-con e-child\" data-id=\"a3f81ec\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fb3d121 elementor-widget elementor-widget-shortcode\" data-id=\"fb3d121\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\t\t<div data-elementor-type=\"container\" data-elementor-id=\"17554\" class=\"elementor elementor-17554 elementor-3585\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3a82e0d1 e-con-full e-flex e-con e-child\" data-id=\"3a82e0d1\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b4de036 elementor-widget elementor-widget-image\" data-id=\"b4de036\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"370\" height=\"370\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/05\/contact-seal.svg\" class=\"attachment-full size-full wp-image-17583\" alt=\"Send Us A Message icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1bc85d61 elementor-widget elementor-widget-heading\" data-id=\"1bc85d61\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Env\u00edenos un mensaje<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cf09046 elementor-widget elementor-widget-shortcode\" data-id=\"cf09046\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\n<div class=\"wpcf7 no-js\" id=\"wpcf7-f17553-o1\" lang=\"es-ES\" dir=\"ltr\" data-wpcf7-id=\"17553\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/es\/wp-json\/wp\/v2\/pages\/18613#wpcf7-f17553-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"17553\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.1.2\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"es_ES\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f17553-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/>\n<\/fieldset>\n<div class=\"protectimus-form\">\n\n<div class=\"row\">\n    <div class=\"col\">\n <span class=\"wpcf7-form-control-wrap\" data-name=\"uname\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Nombre\" value=\"\" type=\"text\" name=\"uname\" \/><\/span>\n    <\/div>\n<\/div>\n\n<div class=\"row\">\n    <div class=\"col\">\n <span class=\"wpcf7-form-control-wrap\" data-name=\"email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Correo electr\u00f3nico\" value=\"\" type=\"email\" name=\"email\" \/><\/span>\n    <\/div>\n<\/div>\n\n<div class=\"row\">\n    <div class=\"col\">\n <span class=\"wpcf7-form-control-wrap\" data-name=\"subject\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Asunto\" value=\"\" type=\"text\" name=\"subject\" \/><\/span>\n    <\/div>\n<\/div>\n\n<div class=\"row\">\n    <div class=\"col\">\n <span class=\"wpcf7-form-control-wrap\" data-name=\"message\"><textarea cols=\"40\" rows=\"1\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Mensaje\" name=\"message\"><\/textarea><\/span>\n    <\/div>\n<\/div>\n\n<div class=\"row\">\n    <div class=\"col mb-2\">\n        <input class=\"wpcf7-form-control wpcf7-submit has-spinner\" type=\"submit\" value=\"Enviar\" \/>\n    <\/div>\n<\/div>\n\n<\/div><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-311ad2c e-grid e-con-full equal-height equal-height-mob e-con e-child\" data-id=\"311ad2c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<a target=\"_blank\" target=\"_blank\" class=\"elementor-element elementor-element-feb2bbc e-con-full four-link e-flex e-con e-child\" data-id=\"feb2bbc\" data-element_type=\"container\" data-e-type=\"container\" href=\"https:\/\/service.protectimus.com\/en\/register\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f27e21b eq-height elementor-widget elementor-widget-heading\" data-id=\"f27e21b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Iniciar prueba gratuita<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-76c9612 elementor-widget elementor-widget-image\" data-id=\"76c9612\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"28\" height=\"26\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/icon-arrow-big.svg\" class=\"attachment-full size-full wp-image-455\" alt=\"Arrow icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t<a class=\"elementor-element elementor-element-4ccade8 e-con-full four-link e-flex e-con e-child\" data-id=\"4ccade8\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\" href=\"https:\/\/www.protectimus.com\/es\/contact-us\/\">\n\t\t\t\t<div class=\"elementor-element elementor-element-45ea78d eq-height elementor-widget elementor-widget-heading\" data-id=\"45ea78d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Contact sales<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e65f9a1 elementor-widget elementor-widget-image\" data-id=\"e65f9a1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"28\" height=\"26\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/icon-arrow-big.svg\" class=\"attachment-full size-full wp-image-455\" alt=\"Arrow icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t<a class=\"elementor-element elementor-element-c9d4aa4 e-con-full four-link e-flex e-con e-child\" data-id=\"c9d4aa4\" data-element_type=\"container\" data-e-type=\"container\" href=\"https:\/\/www.protectimus.com\/es\/pricing\/\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b9e4eb6 eq-height elementor-widget elementor-widget-heading\" data-id=\"b9e4eb6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Detalles de precios<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-120f334 elementor-widget elementor-widget-image\" data-id=\"120f334\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"28\" height=\"26\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/icon-arrow-big.svg\" class=\"attachment-full size-full wp-image-455\" alt=\"Arrow icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t<a class=\"elementor-element elementor-element-e82cb51 e-con-full four-link e-flex e-con e-child\" data-id=\"e82cb51\" data-element_type=\"container\" data-e-type=\"container\" href=\"https:\/\/www.protectimus.com\/es\/guides\/saas-service\/\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d33e100 eq-height elementor-widget elementor-widget-heading\" data-id=\"d33e100\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Gu\u00edas de integraci\u00f3n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3de24d6 elementor-widget elementor-widget-image\" data-id=\"3de24d6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"28\" height=\"26\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/icon-arrow-big.svg\" class=\"attachment-full size-full wp-image-455\" alt=\"Arrow icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>MFA para FortiGate: autenticaci\u00f3n de dos factores sin el coste de FortiToken FortiGate es el firewall de nueva generaci\u00f3n m\u00e1s utilizado en el mercado empresarial, y a la vez, en los \u00faltimos cuatro a\u00f1os, una de las plataformas atacadas de forma m\u00e1s constante. La interfaz SSL VPN, la consola de administraci\u00f3n y el n\u00facleo de [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"class_list":["post-18613","page","type-page","status-publish","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"FortiGate MFA en 1 d\u00eda. Alternativa asequible de FortiToken que admite TOTP, SMS, correo electr\u00f3nico y chat a trav\u00e9s de RADIUS. Nube\/Prem.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"google-site-verification\" content=\"6gzGBVioQ9rC9iYw9El7ERlDCLpc9c0ZqgJvbvqk0t4\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"es_ES\" \/>\n\t\t<meta property=\"og:site_name\" content=\"PROTECTIMUS\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"MFA para FortiGate: autenticaci\u00f3n de dos factores para FortiGate VPN\" \/>\n\t\t<meta property=\"og:description\" content=\"FortiGate MFA en 1 d\u00eda. Alternativa asequible de FortiToken que admite TOTP, SMS, correo electr\u00f3nico y chat a trav\u00e9s de RADIUS. Nube\/Prem.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/protectimus-logo.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/protectimus-logo.png\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-23T18:49:38+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-08-28T21:24:58+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/protectimus\/\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@Protectimus\" \/>\n\t\t<meta name=\"twitter:title\" content=\"MFA para FortiGate: autenticaci\u00f3n de dos factores para FortiGate VPN\" \/>\n\t\t<meta name=\"twitter:description\" content=\"FortiGate MFA en 1 d\u00eda. Alternativa asequible de FortiToken que admite TOTP, SMS, correo electr\u00f3nico y chat a trav\u00e9s de RADIUS. Nube\/Prem.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@Protectimus\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/protectimus-logo.png\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"accounts@vipertop.com\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"20 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/mfa-for-fortigate\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/mfa-for-fortigate\\\/#listItem\",\"name\":\"MFA para FortiGate: autenticaci\\u00f3n de dos factores sin el coste de FortiToken\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/mfa-for-fortigate\\\/#listItem\",\"position\":2,\"name\":\"MFA para FortiGate: autenticaci\\u00f3n de dos factores sin el coste de FortiToken\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/#organization\",\"name\":\"Protectimus Ltd\",\"description\":\"Protectimus Ltd is a multi-factor authentication provider offering cloud and on-premise MFA software, hardware OTP tokens, authenticator applications, and ready-to-use integrations for enterprise infrastructure.\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/\",\"email\":\"sales@protectimus.com\",\"telephone\":\"+17867966664\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/logo-icon.svg\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/mfa-for-fortigate\\\/#organizationLogo\",\"width\":72,\"height\":51,\"caption\":\"Protectimus logo\"},\"image\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/mfa-for-fortigate\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/protectimus\\\/\",\"https:\\\/\\\/x.com\\\/Protectimus\",\"https:\\\/\\\/www.youtube.com\\\/@ProtectimusSolutions\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/protectimus-solution-ltd\\\/\",\"https:\\\/\\\/github.com\\\/protectimus\",\"https:\\\/\\\/www.g2.com\\\/products\\\/protectimus\\\/reviews\",\"https:\\\/\\\/www.capterra.com\\\/p\\\/182993\\\/Protectimus\\\/\",\"https:\\\/\\\/www.gartner.com\\\/reviews\\\/product\\\/protectimus\",\"https:\\\/\\\/sourceforge.net\\\/software\\\/product\\\/Protectimus\\\/\",\"https:\\\/\\\/www.getapp.com\\\/security-software\\\/a\\\/protectimus\\\/\",\"https:\\\/\\\/www.softwareadvice.com\\\/product\\\/462406-Protectimus\\\/\",\"https:\\\/\\\/www.trustradius.com\\\/products\\\/protectimus\\\/reviews\",\"https:\\\/\\\/www.trustpilot.com\\\/review\\\/protectimus.com\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/mfa-for-fortigate\\\/#webpage\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/mfa-for-fortigate\\\/\",\"name\":\"MFA para FortiGate: autenticaci\\u00f3n de dos factores para FortiGate VPN\",\"description\":\"FortiGate MFA en 1 d\\u00eda. Alternativa asequible de FortiToken que admite TOTP, SMS, correo electr\\u00f3nico y chat a trav\\u00e9s de RADIUS. Nube\\\/Prem.\",\"inLanguage\":\"es-ES\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/mfa-for-fortigate\\\/#breadcrumblist\"},\"datePublished\":\"2026-07-23T18:49:38+00:00\",\"dateModified\":\"2026-08-28T21:24:58+00:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/\",\"name\":\"PROTECTIMUS\",\"inLanguage\":\"es-ES\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/es\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>MFA para FortiGate: autenticaci\u00f3n de dos factores para FortiGate VPN<\/title>\n\n","aioseo_head_json":{"title":"MFA para FortiGate: autenticaci\u00f3n de dos factores para FortiGate VPN","description":"FortiGate MFA en 1 d\u00eda. Alternativa asequible de FortiToken que admite TOTP, SMS, correo electr\u00f3nico y chat a trav\u00e9s de RADIUS. Nube\/Prem.","canonical_url":"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"6gzGBVioQ9rC9iYw9El7ERlDCLpc9c0ZqgJvbvqk0t4","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/es\/#listItem","position":1,"name":"Home","item":"https:\/\/www.protectimus.com\/es\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/#listItem","name":"MFA para FortiGate: autenticaci\u00f3n de dos factores sin el coste de FortiToken"}},{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/#listItem","position":2,"name":"MFA para FortiGate: autenticaci\u00f3n de dos factores sin el coste de FortiToken","previousItem":{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/es\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/www.protectimus.com\/es\/#organization","name":"Protectimus Ltd","description":"Protectimus Ltd is a multi-factor authentication provider offering cloud and on-premise MFA software, hardware OTP tokens, authenticator applications, and ready-to-use integrations for enterprise infrastructure.","url":"https:\/\/www.protectimus.com\/es\/","email":"sales@protectimus.com","telephone":"+17867966664","logo":{"@type":"ImageObject","url":"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/logo-icon.svg","@id":"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/#organizationLogo","width":72,"height":51,"caption":"Protectimus logo"},"image":{"@id":"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/#organizationLogo"},"sameAs":["https:\/\/www.facebook.com\/protectimus\/","https:\/\/x.com\/Protectimus","https:\/\/www.youtube.com\/@ProtectimusSolutions","https:\/\/www.linkedin.com\/company\/protectimus-solution-ltd\/","https:\/\/github.com\/protectimus","https:\/\/www.g2.com\/products\/protectimus\/reviews","https:\/\/www.capterra.com\/p\/182993\/Protectimus\/","https:\/\/www.gartner.com\/reviews\/product\/protectimus","https:\/\/sourceforge.net\/software\/product\/Protectimus\/","https:\/\/www.getapp.com\/security-software\/a\/protectimus\/","https:\/\/www.softwareadvice.com\/product\/462406-Protectimus\/","https:\/\/www.trustradius.com\/products\/protectimus\/reviews","https:\/\/www.trustpilot.com\/review\/protectimus.com"]},{"@type":"WebPage","@id":"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/#webpage","url":"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/","name":"MFA para FortiGate: autenticaci\u00f3n de dos factores para FortiGate VPN","description":"FortiGate MFA en 1 d\u00eda. Alternativa asequible de FortiToken que admite TOTP, SMS, correo electr\u00f3nico y chat a trav\u00e9s de RADIUS. Nube\/Prem.","inLanguage":"es-ES","isPartOf":{"@id":"https:\/\/www.protectimus.com\/es\/#website"},"breadcrumb":{"@id":"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/#breadcrumblist"},"datePublished":"2026-07-23T18:49:38+00:00","dateModified":"2026-08-28T21:24:58+00:00"},{"@type":"WebSite","@id":"https:\/\/www.protectimus.com\/es\/#website","url":"https:\/\/www.protectimus.com\/es\/","name":"PROTECTIMUS","inLanguage":"es-ES","publisher":{"@id":"https:\/\/www.protectimus.com\/es\/#organization"}}]},"og:locale":"es_ES","og:site_name":"PROTECTIMUS","og:type":"article","og:title":"MFA para FortiGate: autenticaci\u00f3n de dos factores para FortiGate VPN","og:description":"FortiGate MFA en 1 d\u00eda. Alternativa asequible de FortiToken que admite TOTP, SMS, correo electr\u00f3nico y chat a trav\u00e9s de RADIUS. Nube\/Prem.","og:url":"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/","og:image":"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/protectimus-logo.png","og:image:secure_url":"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/protectimus-logo.png","article:published_time":"2026-07-23T18:49:38+00:00","article:modified_time":"2026-08-28T21:24:58+00:00","article:publisher":"https:\/\/www.facebook.com\/protectimus\/","twitter:card":"summary_large_image","twitter:site":"@Protectimus","twitter:title":"MFA para FortiGate: autenticaci\u00f3n de dos factores para FortiGate VPN","twitter:description":"FortiGate MFA en 1 d\u00eda. Alternativa asequible de FortiToken que admite TOTP, SMS, correo electr\u00f3nico y chat a trav\u00e9s de RADIUS. Nube\/Prem.","twitter:creator":"@Protectimus","twitter:image":"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/protectimus-logo.png","twitter:label1":"Written by","twitter:data1":"accounts@vipertop.com","twitter:label2":"Est. reading time","twitter:data2":"20 minutes"},"aioseo_meta_data":{"post_id":"18613","title":"MFA para FortiGate: autenticaci\u00f3n de dos factores para FortiGate VPN","description":"FortiGate MFA en 1 d\u00eda. Alternativa asequible de FortiToken que admite TOTP, SMS, correo electr\u00f3nico y chat a trav\u00e9s de RADIUS. Nube\/Prem.","keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-09-08 08:37:30","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"open_ai":null,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":[],"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-08-28 21:24:51","updated":"2026-09-08 08:37:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.protectimus.com\/es\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\tMFA para FortiGate: autenticaci\u00f3n de dos factores sin el coste de FortiToken\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.protectimus.com\/es\/"},{"label":"MFA para FortiGate: autenticaci\u00f3n de dos factores sin el coste de FortiToken","link":"https:\/\/www.protectimus.com\/es\/mfa-for-fortigate\/"}],"_links":{"self":[{"href":"https:\/\/www.protectimus.com\/es\/wp-json\/wp\/v2\/pages\/18613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.protectimus.com\/es\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.protectimus.com\/es\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/es\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/es\/wp-json\/wp\/v2\/comments?post=18613"}],"version-history":[{"count":1,"href":"https:\/\/www.protectimus.com\/es\/wp-json\/wp\/v2\/pages\/18613\/revisions"}],"predecessor-version":[{"id":18614,"href":"https:\/\/www.protectimus.com\/es\/wp-json\/wp\/v2\/pages\/18613\/revisions\/18614"}],"wp:attachment":[{"href":"https:\/\/www.protectimus.com\/es\/wp-json\/wp\/v2\/media?parent=18613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}