

The same is not true for FortiToken Mobile because of the way FTM tokens are generated, transmitted and provisioned. Further, GA tokens can be easily stolen through shoulder surfing. I can load the same token on multiple instances of GA thereby breaking the second factor rule. Tokens installed on GA are easily copied.

If that factor is able to be copied, it is no longer meeting the definition of 2FA and is not secure in that sense. Their annual soft token cost is $38 PER YEAR.Īs for security, the token in 2FA is the second factor, the " something you have" factor. So an apples-to-apples comparison is not trivial.Ī quick Google search reveals this link to a cost comparison from Yubico, who claims the YubiKey has the lowest total fees and annual total cost per credential. And there are tons of pricing gimmicks and games, such as server costs and annual subscription fees. And there is always a difference between " List" and " street" price. But you will still have to pay those vendors.Īs for pricing analysis, that is highly proprietary and is not something to share in a public forum. If you don' t want Fortinet tokens fro use with your FortiGate, then use someone else' s, like Vasco, Safenet or RSA. Fortinet is the only vendor that offers two free tokens with their devices.

Second, what other firewall/VPN vendor offers free tokens for 2FA? Not Cisco, not Checkpoint, not Juniper, not anyone. OAuth is an open standard for authorization, something completely different. but i' ll try one more time to answer your concerns:įirst of all the, the organization for authentication interoperability standards is OATH, not OAUTH.
