Skip to main content
joebrug
joebrug
New Member
June 27, 2018
Question

Fortigate + Cisco WCL + APs , active directory auth?

  • June 27, 2018
  • 2 replies
  • 7134 views

Hi all..

 

I'm currently using FSSO to authenticate my windows users with the Fortigate, where I have web filtering policies set up, etc so they can/cant get to certain categories.

 

I want to do the same for wireless devices connecting to our internal WiFi. We have Cisco AP's connected to a Cisco WLC 2504 wireless controller. I was able to set up LDAP on the WLC, which prompted me for a login on my phone, it took my AD credentials and let me in. However, the Fortigate never recognized me as my AD user.. only as the IP address of my phone. So I wasn't falling into the right web filtering policies, etc.

 

Whats the right way to accomplish this? If I can provide more useful details, please let me know. Thanks!

    2 replies

    joebrug
    joebrugAuthor
    New Member
    August 22, 2018

    Never got a response to this? :\

    pyy
    pyy
    New Member
    August 27, 2018

    Hi Joe, The WLC is only check your username and password and perform an action if matched. It is not generate a logon event in order FSSO allow you to browse internet. In that case i believe that Fortiauthenticator can help you with your design.

    joebrug
    joebrugAuthor
    New Member
    March 1, 2019

    I still haven't figured this out and its come back up on the project list. Do I really need more software/hardware to accomplish this?

     

    Again, Cisco WLC/AP's connecting to Fortigate 200D running 5.4.9.

     

    I use FSSO for desktops to authenticate against Active Directory, so I can see who is who on web filtering. I want to do the same thing for wireless devices. Right now, all I see is IP addresses on wifi subnet.

    Terms & ConditionsAccessibility statement