Fortigate fsso wifi

Click OK to save the group settings. Click OK to save the connector settings. The Active Directory Connector is the front end connector that can be configured by FortiGate administrators.

Add the FSSO groups to a policy FSSO groups can be used in a policy by either adding them to the policy directly, or by adding them to a local user group and then adding the group to a policy. Enter a name for the group in the Name field. Click OK. Add the local FSSO group to a policy. In the Select Entries pane, select the User tab. Select the FSSO groups.

Configure the remaining settings as required. If the expected AD user is not in list, but other users are, it means that either: The FortiGate missed the log in event, which can happen if many users log in at the same time, or The user's workstation is unable to connect to the DC, and is currently logged in with cached credentials, so there is no entry in the DC security event log.

FSSO 5. Ensure the IP address and username match the workstation IP and the username of the user in question. If user is not shown in the Show User List, enable Log level to Debug, try a new logon event and verify if user related logon information is in the log. The output will provide information which DC has served the logon event. Verify if the user is shown in both FSSO and firewall auth lists.

We are set to "Always dynamically update DNS records". Only fix we have found is to have them turn off wireless when docked and then to turn it on when wireless, then back off before they dock again. Have a look at this post as well. More detailed than the technet one. This is what I used to fine tune it.

So far this has drastically lessened the number of calls our support line handles for content filtering profile problems. We don't use the DC polling , but then we're going a little more heavy duty for authentication than most.

Fortinet Community. Help Sign In. Fortinet Forum. The Forums are a place to find answers on a range of Fortinet products from peers and product experts. Kevin New Contributor. I have configured the fortinet D to query the three domain controllers. For desktop users I am pretty happy with the authentication.