Monitoring authenticated users This section describes how to view lists of currently logged-in firewall and VPN users. It also describes how to disconnect users. The following topics are included in this section: Monitoring firewall users Monitoring SSL VPN users Monitoring IPsec VPN users Monitoring users Quarantine Monitoring firewall users […]
SSO using RADIUS accounting records A FortiGate unit can authenticate users transparently who have already authenticated on an external RADIUS server. Based on the user group to which the user belongs, the security policy applies the appropriate UTM profiles. RADIUS SSO is relatively simple because the FortiGate unit does not […]
IPsec VPNs and certificates Certificate authentication is a more secure alternative to preshared key (shared secret) authentication for IPsec VPN peers. Unlike administrators or SSL VPN users, IPsec peers use HTTP to connect to the VPN gateway configured on the FortiGate unit. The VPN gateway configuration can require certificate authentication […]
Troubleshooting FSSO When installing, configuring, and working with FSSO some problems are quite common. A selection of these problems follows including explanations and solutions. Some common Windows AD problems include: General troubleshooting tips for FSSO Users on a particular computer (IP address) can not access the network Guest users do […]
Testing FSSO Once FSSO is configured, you can easily test to ensure your configuration is working as expected. For additional FSSO testing, see Troubleshooting FSSO on page 551. 1. Logon to one of the stations on the FSSO domain, and access an Internet resource. 2. Connect to the CLI of the […]
FortiOS FSSO log messages There are two types of FortiOS log messages — firewall and event. FSSO related log messages are generated from authentication events. These include user logon and log off events, and NTLM authentication events. These log messages are central to network accounting policies, and can also be […]
Creating security policies Policies that require FSSO authentication are very similar to other security policies. Using identity-based policies, you can configure access that depends on the FSSO user group. This allows each FSSO user group to have its own level of access to its own group of services In this […]
Creating Fortinet Single Sign-On (FSSO) user groups You cannot use Windows or Novell groups directly in FortiGate security policies. You must create FortiGate user groups of the FSSO type and add Windows or Novell groups to them. To create a user group for FSSO authentication – web-based manager: 1. […]
