Hot!Push notification services for FortiToken Mobile

Author
theFWdude
Bronze Member
  • Total Posts : 36
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/10/04 08:53:22
  • Status: offline
2017/10/30 18:06:18 (permalink)
0

Push notification services for FortiToken Mobile

So, I got this message on my FAC today when I logged into it:  "The push notification service for FortiToken Mobiles will stop working on 2017-11-27. Please upgrade the FortiAuthenticator firmware before then to avoid any service disruptions".  Has anyone else gotten this message on their FAC?
FAC Info
Code: v5.0.0, build0012 (GA)
License Type:  Full (never expires)
 
Thanks,
FWDude
#1

12 Replies Related Threads

    cbabfat
    New Member
    • Total Posts : 20
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/11/20 11:58:02
    • Status: offline
    Re: Push notification services for FortiToken Mobile 2017/10/31 05:37:51 (permalink)
    0
    I just logged in to check and I got the same error message.  I checked the date on my firmware and wow, I can't believe it has been this long since I updated.  I assume  they are making some change that you need at least a certain version of firmware to support push notifications.  I still am not using push notification since it requires a hole in the firewall.
     
    Interesting though, I guess you are running the latest code.
     
    post edited by cbabfat - 2017/10/31 05:38:58
    #2
    theFWdude
    Bronze Member
    • Total Posts : 36
    • Scores: 0
    • Reward points: 0
    • Joined: 2016/10/04 08:53:22
    • Status: offline
    Re: Push notification services for FortiToken Mobile 2017/10/31 06:15:26 (permalink)
    0
    Yea, we're on the latest code release.  The FAC was a new build so I built it on the latest release at the time. 
    #3
    theFWdude
    Bronze Member
    • Total Posts : 36
    • Scores: 0
    • Reward points: 0
    • Joined: 2016/10/04 08:53:22
    • Status: offline
    Re: Push notification services for FortiToken Mobile 2017/10/31 06:31:51 (permalink)
    0
    So TAC just got back with me on this.  Evidently FAC 5.1 will provide support for Push Authentication.  "Push authentication is simply an easier way to perform authentication on the phone instead of having to enter the OTP."  
     
    #4
    xsilver_FTNT
    Expert Member
    • Total Posts : 429
    • Scores: 91
    • Reward points: 0
    • Joined: 2015/02/02 03:22:58
    • Status: offline
    Re: Push notification services for FortiToken Mobile 2017/10/31 08:54:19 (permalink)
    0
    It is false flag warning and is handled internally. Next patch releases should have that fixed.

    Kind Regards,
    Tomas
    #5
    cbabfat
    New Member
    • Total Posts : 20
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/11/20 11:58:02
    • Status: offline
    Re: Push notification services for FortiToken Mobile 2017/10/31 14:15:16 (permalink)
    0
    It is interesting this just started happening.  We were running 9 to 12 months behind in code and this morning we got that popup.  Obviously, the system checked-in or something to now start getting the popup.  I don't like.  Not on my authentication platform.
     
    Anyway, took the opportunity to upgrade to 5.00 this evening.
     
    #6
    menayoub
    New Member
    • Total Posts : 3
    • Scores: 0
    • Reward points: 0
    • Joined: 2017/05/02 07:34:54
    • Status: offline
    Re: Push notification services for FortiToken Mobile 2017/11/13 02:44:01 (permalink)
    0
    So should we Update or not ?
    I am on version v4.00-build0155-20161228-patch00 
    If the Update was necessary, to which version ?
     
    Kind regaards
    #7
    cbabfat
    New Member
    • Total Posts : 20
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/11/20 11:58:02
    • Status: offline
    Re: Push notification services for FortiToken Mobile 2017/11/13 07:07:43 (permalink)
    0
    I would stay in the 4.x range right now.  Will reply more in a few minutes.
     
    #8
    cbabfat
    New Member
    • Total Posts : 20
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/11/20 11:58:02
    • Status: offline
    Re: Push notification services for FortiToken Mobile 2017/11/13 07:28:02 (permalink)
    0
    5.00 has the mystery pop-up about push notifications.  We don't use push, but since upgrading to it, we don't get the pushes anymore.  Probably want to stay away from that if you are using push, but I don't know the details.
     
    5.1.0 Came out and it broke our RDP, but push error message went away.  It broke the Microsoft Windows Agent 2.0.2 (the current version for a while).  The request goes to the Authenticator, authenticates THERE with token, then tries to authenticate AGAIN and looks like it never responds to the agent on the RDP server.
     
    5.1.1 came out with patches to broken stuff in 5.1.0.  That still did not fix the Microsoft Windows Agent and our RDP.  They never acknowledged it until they finally got a hold of me days later.  I was disappointed with how long it took support.  We ending up rolling back to 5.0.0.  AND if I could have got a hold of someone in tier 2 faster, I would have rolled back immediately.  Instead, we were impacted and had a lower security stance during some hours over the weekend.  Otherwise, we turned off RDP we not necessary for security.  Our error is pushed over to engineering/development.
     
    These were a bunch of patches too close together, so I would give it some time.  I assume 5.1.2 should be released shortly, but I would wait till it is out for a while.
     
    Chris
     
    #9
    bmduncan34
    New Member
    • Total Posts : 18
    • Scores: 0
    • Reward points: 0
    • Joined: 2017/07/05 10:33:11
    • Status: offline
    Re: Push notification services for FortiToken Mobile 2018/01/31 05:44:50 (permalink)
    0
    I just upgraded to 4.3.3 and I got that message.  My tokens appear to be working fine.  What did you find out?
     
    Thanks
     
     
    #10
    cbabfat
    New Member
    • Total Posts : 20
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/11/20 11:58:02
    • Status: offline
    Re: Push notification services for FortiToken Mobile 2018/01/31 06:27:11 (permalink)
    0
    At some point in the post 5.0.0 upgrades, the message went away.  That is it.  We are not using push notifications, so it did not matter to us.  Currently, we are running v5.1.0, build0091.  I would stay a couple releases back until everything is tested for a month or more and read the release notes.  There were a lot of problems in the 5.x.x codes when they came out.
     
    Chris
    #11
    tanr
    Platinum Member
    • Total Posts : 680
    • Scores: 31
    • Reward points: 0
    • Joined: 2016/05/09 17:09:43
    • Status: offline
    Re: Push notification services for FortiToken Mobile 2018/01/31 07:30:15 (permalink)
    0
    There's now a new version of FortiToken Mobile 4.2.0 which has in it's version info:
     
        "Secure token transfer (REQUIRES FAC 5.3 or higher)"
     
    FAC 5.3.x isn't shown as released yet, so this seems kind of problematic.
     
    Anybody know about a 5.3.x FAC coming out, or what the "secure token transfer" feature mentioned with FortiToken Mobile is?
    #12
    sotir1984
    Bronze Member
    • Total Posts : 23
    • Scores: 0
    • Reward points: 0
    • Joined: 2017/02/21 09:05:56
    • Status: offline
    Re: Push notification services for FortiToken Mobile 2019/06/30 13:02:28 (permalink)
    0
    Hi,
     
    Do i need to allow specific port for my push notifications to work?
     
    I have it configured and i only receive push notification when i try to log in into the FortiAuthenticator itself. But when i use it to log in to my firewalls, i don't receive notification.
     
    Thank you,
    #13
    Jump to:
    © 2019 APG vNext Commercial Version 5.5