Skip to main content
BlueP
Explorer
December 19, 2023
Question

Authentication issue

  • December 19, 2023
  • 2 replies
  • 1227 views

Hello Everyone,

       

1- I am currently experiencing an issue with my FortiGate 500E, running software version 6.4.7. The problem arises intermittently when some users connect to the wireless network, resulting in a complete loss of internet connectivity.

2- Upon reviewing the firewall logs, I observed that affected users are marked as de-authenticated, denoted by an orange user icon, as shown in the attached screenshot.

3- also upon Collector agent Logs, I found that the affected users are not shown as well in the logon users tap in the collector

4- as a workaround to resolve this issue, users are asked to sign out and sign in multiple times, or in some cases, they need to restart their laptops. I am reaching out to seek guidance on addressing this issue and to inquire if others have encountered a similar situation.

Screenshot_31.png

 

2 replies

hbac
Staff
Staff
December 19, 2023

Hi @BlueP,

 

Can you make sure that the user login as a domain user and not local user. Please refer to this article: https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-Troubleshoot-FSSO-missing-logins-in/ta-p/204758

 

Regards, 

dbu
Staff
Staff
December 19, 2023

Since the logons are missing on Collector agent you need to start investigation from the FSSO CA itself.

Check logs on FSSO CA (make sure level is 'debu')

Is the FSSO Collector agent polling from the domain or receiving logons from DC Agent ? 

If from agent, check also dc agent logs regarding this login. 

If pooling from domain than check the domain logs. 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!