FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Jonathan_Body_FTNT
Article Id 197639
Description

This article explains how many wildcard users can be configured with RADIUS authentication.


 


Scope

All FortiOS versions.


Solution
A single wildcard admin user can be configured in FortiOS when using RADIUS authentication.

Enabling the "wildcard" option allows all accounts configured on the RADIUS server to connect to the FortiGate as an administrator.

The default configuration is "disable".
This feature is only available when "remote-auth" for RADIUS users is enabled, as shown in the following CLI example:
edit "Test"
set remote-auth enable
set accprofile "super_admin_readonly"
.../...
set wildcard enable
set remote-group "Admin_Test"

Contributors