WEb Filter and AD

traposama · ‎02-06-2017

Hi!!!

I have a fortigate 300D with AD user/group.

I have one issue detected now. All user with admin attribute in your own PC are detected like administrator. Somebody know why!?

MikePruett · ‎02-06-2017

When you say detected as an admin you mean an admin user to the FortiGate? or as an admin user in the users and groups so they hit the incorrect policy?

Mike Pruett

Fortinet GURU | Fortinet Training Videos

traposama · ‎02-06-2017

Hello Mike!

Is detected as Administrator and apply the incorrect policy!

Some tips how to debug and fix ?

Thx.

neonbit · ‎02-07-2017

Also if you're using FSSO you can select users which to ignore logon events for. I'd recommend configuring the Administrator account so that these login events dont get captured by the FSSO agent.

Doc on this can be found here: http://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-authentication-54/FSAE.htm#config_use...

traposama · ‎02-07-2017

Hi!!!

I use FFSO and check the users and have only one group membership and administrator too.

I have one issue with FFSO when click show logon user dont show anything, only see logon user in the log.

Thx.