Skip to main content
tnhafiz
New Member
Jun 28, 2016 4:07 AM UTC
Question

Block Facebook

Hi guys,

 

My infra consist of hundreds VDI(citrix) & VM(VMware). And my fortigate not not applied with FSSO. The issue here is, how can I block facebook for some users that using VDI(IP address and hostname change everytime users login)?

 

Thank you

    2 replies

    pcraponi
    New Member
    Jun 28, 2016 11:29 AM UTC

    Hi,

     

    You have 2 options:

     

    - Use explict web proxy with Session basead authentication

    or

    - Search for FSSO for Citrix

     

    http://docs.fortinet.com/uploaded/files/1937/fortigate-authentication-52.pdf

     

    Regards,

    Paulo R.

    rey90
    New Member
    Jul 1, 2016 4:35 PM UTC

    Hi,

     

    i think you will be asked for more things to block. So in your position i would config both, webproxy and FSSO.

     

    works fine for me. Just a few hints:

    - Install Fortinet collector agent on DC

    - Install Terminal Server Agent on Terminal server

     

    Don´t use the other methods such as reading from the AD or getting pushed updates from DC to a seperate maschine. don´t worked for me very good.

     

    Regards

     

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT