1- Appreciate your support to confirm the comptability for PulseSecure PCS with FortiAuthenticator + FortiToken hardware on-prem as a total Remote access 2FA.
PCS Client Agent > Internet > PCS > FortiAuthenticator RADIUS + AD + 2nd FA FortiToken > FortiGate FW > Resource access.
2- What make PCS add value instead of making SSL VPN directly on firewall itself ??
Thanks in advance,
Yes, you can integrate the authentication between PCS and FAC using RADIUS. Keep in mind that you have to configure a radius rule in order to be able to use the 2FA.
As a very general advice, the strength of PCS compared to the SSLVPN offered by the firewall itself is that is a dedicated VPN solution so it has more options.
I have written an blog post about integration of ivanti (pulse) connect secure with fortiauthenticator last year.
The original article is in german:
But google translator did a good job translating the article to english: