Configuring local users in Fortigate firewalls SSL VPN for email MFA, password expiration and password complexity requirements

[Turritopsis Dohrnii Teo En Ming via Net-snmp-users]

Subject: Configuring local users in Fortigate firewalls SSL VPN for email MFA, 
password expiration and password complexity requirements

Good day from Singapore,

Author: Mr. Turritopsis Dohrnii Teo En Ming
Country: Singapore
Date of document: 23 Nov 2025 Sunday

config user password-policy
        edit "passwordpolicy"
                set expire-days 90
                set warn-days 5
                set expired-password-renewal disable
                set expire-status enable
                set minimum-length 12
                set min-lower-case-letter 1
                set min-upper-case-letter 1
                set min-non-alphanumeric 1
                set min-number 1
                set reuse-password disable
        next
end

config user local
        edit "agent1.local"
                set passwd-policy "passwordpolicy"
        next
end     

config user local
        edit "agent2.local"
                set passwd-policy "passwordpolicy"
        next
end     

config user local
        edit "agent3.local"
                set passwd-policy "passwordpolicy"
        next
end     

config user local
        edit "agent4.local"
                set passwd-policy "passwordpolicy"
        next
end


config user local
    edit "agent1.local"
        set type password
        set two-factor email
        set email-to "age...@secretservice.gov"
        set passwd-policy "passwordpolicy"
        set passwd-time 2025-11-20 09:55:27
        set passwd ENC 
    next
end

config user local
    edit "agent2.local"
        set type password
        set two-factor email
        set email-to "age...@secretservice.gov"
        set passwd-policy "passwordpolicy"
        set passwd-time 2025-11-21 14:04:45
        set passwd ENC 
    next
end

config user local
    edit "agent3.local"
        set type password
        set two-factor email
        set email-to "age...@secretservice.gov"
        set passwd-policy "passwordpolicy"
        set passwd-time 2025-11-19 11:55:34
        set passwd ENC 
    next
end

config user local
    edit "agent4.local"
        set type password
        set two-factor email
        set email-to "age...@secretservice.gov"
        set passwd-policy "passwordpolicy"
        set passwd-time 2025-11-21 14:01:47
        set passwd ENC 
    next
end     

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Singapore
23 Nov 2025 Sunday 3.00 PM Singapore Time







_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users