Explorer III

Solved

Add AD users to firewall policy

11 replies
7230 views

Is this possible... the only information I can find states "user groups".

I have this part working by using FSSO for users and groups but cannot find a way of adding a policy for 1 user unless i create a new AD group on my domain and add that group to the policy.

FortiGate

xshkurtiAnswer

Staff

@Mes-Lili2

I assume this is what you are looking for:
Technical Tip : How to allow traffic from specific... - Fortinet Community

pbangari

Staff

Hi,

See if below kb article helps you with this requirement:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-FortiGate-to-use-an-LDAP-server/ta-p/196141

Mes-Lili2Author

Explorer III

Nice document but not much help here as that is for user authentication. many thanks..

xshkurtiAnswer

Staff

@Mes-Lili2

I assume this is what you are looking for:
Technical Tip : How to allow traffic from specific... - Fortinet Community

Mes-Lili2Author

Explorer III

thanks for that, i did try that yesterday but failed so will try to see why.

dbu

Staff

Hi @Mes-Lili2 ,

In addition run the following debug and try to reproduce the issue so we can find more why it is failing :

diag debug console timestamp enable

diag debug app fnbamd -1

diag debug enable

Further troubleshooting:
Troubleshooting Tip: Fortigate LDAP - Fortinet Community

Regards!

Mes-Lili2Author

Explorer III

I am unable to test properly as the fsso agent is getting my name to ip adress as firstname(space)lastname but forti LDAP is showing me as firstname(.)lastname so not matching.

Mes-Lili2Author

Explorer III

ok username from fsso is same as ldap but still not working, nothing shows in the cli when a web site connection is attempted

Sign up

Login with SSO

Login to the community

Login with SSO