Explicit proxy mode and fortianalyzer reports

Hi,

we found that:

- in large environment with Citrix/RDS, using FSSO agents just doenst work reliably. Users log off/on are not intercepted, Fortigate things a user is logged in when it is not  = reports are wrong

- Webactivity reports are a mess: i can have a 5 pages with the same url listed, each line shows every like millisecond. It seems it cannot aggreagate data, i.e. a user went to facebook 3 times, once at 1200pm once at 1pm and once at 2pm. Instead of showing everysingle transaction towards facebook, resulting in logs showing hundreds of lines.

This is a major problem, i mean squid can do that much better, it is free but it is a pain to maintain.

How do you guys deal with it? If i use say the fortigate in explicit mode, do i have 100% accurancy on which user is browsin which page?

thanks