u/bianko80

Hi guys, sorry for the dumb question.

Minutes ago I was taking a photo from inside Whatsapp (to me) of my desktop screen with the LAPS password in the Entra admin console. The photo did not deliver, there were the clock icon. Tried several times and same problem. I was connected to my company wireless network, and fortigate is the wireless controller. I disabled wifi on my mobile and soon after I got the two blue checkmarks. I went to the firewall policy that my mobile devices use and I do not have any DLP enabled...

Are there any default settings on the fortigate that prevent "sensitive" data to traverse (forward) it?

EDIT: I forgot to also say that I took pics of random things on my desk (keyboard, etc) and they delivered correctly while connected to the wifi.

Thanks

Hi, we were an on-prem only company. Earlier this year we went hybrid with 365.

For VPN earlier we had our clients connecting through forticlient with AD credentials leveraging RADIUS. No MFA.

We then configured a parallel setup using IPSec ike v2 and authentication with EntraID, adding the MFA feature then.

My question is: is this the natural approach that most of the former on-premise companies adopt once moved to Cloud or are there other suggested setups, maybe leveraging already existent on-premise RADIUS infrastructure?