Fortigate and Citrix FSSO

[gian72]

Hi to all I've a strange problem on my fortigates.

Long story short: when the first user logs in she/he is seen twice by the fortigate: once as Fortigate Single Sign on and another as FSSO Citrix. The last one shouuld be the only one present... the first one opens the IP of the server with the credential of the user to all subsequent users...

On the citrix server I've installed the TS Agent and configured to send the data to the collector that is installed on the domain controller

On the domain controller FSSO Agent in advanced, in Citrix/Terminal server I've put a tick on Citrix Server v.6.0 or later and separated by colon (:) all my citrix servers where the users log on.

Is this correct, other of you have some expertise on citrix/fortigate?

Thanks for a quick answer!

Ciao Gianluca

[gian72]

Another strange thing is: when I enable the debug in the collectorAgent.log file I see this entries when starting the agent:

05/15/2019 14:49:14 [ 5632] Remote desktop session detect thread for server xxx.yyy.local has been launched 05/15/2019 14:49:14 [ 7092] Failed to get virtual ip address, err:1722 05/15/2019 14:49:14 [10520] Failed to get virtual ip address, err:1722 05/15/2019 14:49:14 [ 8800] Failed to get virtual ip address, err:1722 05/15/2019 14:49:14 [12204] Failed to get virtual ip address, err:1722

xxx.yyy.local is the FQDN of a citrix server...

I've tried with the ips too, no change...

Thanks!