Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mnumigration
New Contributor

Fortigate LDAP policy flow

Hi all

 

Is anyone able to advise if it is possible to use LDAP groups in a policy and also have a catch all policy where sources are set to all.  Is it expected that if using LDAP groups in a policy that if sources are set to all, and if I have another policy with source is all that LDAP policy will never work?

 

For example

 

Policy

 

LDAP 

Source: all, Source: ldap group Destination: all

 

Catch all

 

Source all, Destination: all

 

 

Thanks in advance

 

2 REPLIES 2
Alivo__FTNT
Staff
Staff

Hello,

It was possible before 5.2 and now in 6.2 you have following possibility:

https://docs.fortinet.com/document/fortigate/6.2.0/new-features/238665/authentication-policy-extensi...

 

Best Regards,

Alivo

livo

mnumigration

Thanks for the info Alivo, much appreciated

Labels
Top Kudoed Authors