Skip to main content
gian72
New Member
May 14, 2019
Question

Fortigate and Citrix FSSO

  • May 14, 2019
  • 1 reply
  • 4169 views

Hi to all I've a strange problem on my fortigates.

Long story short: when the first user logs in she/he is seen twice by the fortigate: once as Fortigate Single Sign on and another as FSSO Citrix. The last one shouuld be the only one present... the first one opens the IP of the server with the credential of the user to all subsequent users...

On the citrix server I've installed the TS Agent and configured to send the data to the collector that is installed on the domain controller

 

On the domain controller FSSO Agent in advanced, in Citrix/Terminal server I've put a tick on Citrix Server v.6.0 or later and separated by colon (:) all my citrix servers where the users log on.

 

Is this correct, other of you have some expertise on citrix/fortigate?

 

Thanks for a quick answer!

Ciao Gianluca

 

 

    1 reply

    gian72
    gian72Author
    New Member
    May 15, 2019

    Another strange thing is: when I enable the debug in the collectorAgent.log file I see this entries when starting the agent:

    05/15/2019 14:49:14 [ 5632] Remote desktop session detect thread for server xxx.yyy.local has been launched 05/15/2019 14:49:14 [ 7092] Failed to get virtual ip address, err:1722 05/15/2019 14:49:14 [10520] Failed to get virtual ip address, err:1722 05/15/2019 14:49:14 [ 8800] Failed to get virtual ip address, err:1722 05/15/2019 14:49:14 [12204] Failed to get virtual ip address, err:1722

     

    xxx.yyy.local is the FQDN of a citrix server...

     

    I've tried with the ips too, no change...

    Thanks!

     

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.