Technical Tip: Viewing the username/IP address on traffic logs using FSSO server logged on users
| Description | This article describes how to view the username/ip address on forward traffic logs using FSSO logged on domain users, even though the FSSO user is not authenticated on the respective firewall policy. |
| Scope | FortiGate, FSSO, Log. |
| Solution | To achieve this, FSSO should be configured:
Now, any user from the domain logs in to the AD server, then those users will be updated on the FortiGate user list as follows:
diagnose debug authd fsso list IP: 10.108.3.14 User: NSE8-USER2 Groups: CN=NSE8-USER2,CN=USERS,DC=DXB-NSE8,DC=LAB+CN=USERS,DC=DXB-NSE8,DC=LAB+CN=DOMAIN USERS,CN=USERS,DC=DXB-NSE8,DC=LAB+CN=NSE8GRP,CN=USERS,DC=DXB-NSE8,DC=LAB+CN=USERS,CN=BUILTIN,DC=DXB-NSE8,DC=LAB Workstation: 10.108.3.14 MemberOf: CN=DOMAIN USERS,CN=USERS,DC=DXB-NSE8,DC=LAB CN=NSE8GRP,CN=USERS,DC=DXB-NSE8,DC=LAB CN=USERS,CN=BUILTIN,DC=DXB-NSE8,DC=LAB
Configure a firewall policy to allow the traffic from the internal interface to the external ISP interface (no FSSO User/Usergroup is selected under Source Option).
|
