Skip to main content
mnumigration
New Member
May 3, 2019
Question

Fortigate LDAP policy flow

  • May 3, 2019
  • 1 reply
  • 3292 views

Hi all

 

Is anyone able to advise if it is possible to use LDAP groups in a policy and also have a catch all policy where sources are set to all.  Is it expected that if using LDAP groups in a policy that if sources are set to all, and if I have another policy with source is all that LDAP policy will never work?

 

For example

 

Policy

 

LDAP 

Source: all, Source: ldap group Destination: all

 

Catch all

 

Source all, Destination: all

 

 

Thanks in advance

 

1 reply

Alivo__FTNT
Staff
Staff
May 7, 2019

Hello,

It was possible before 5.2 and now in 6.2 you have following possibility:

https://docs.fortinet.com/document/fortigate/6.2.0/new-features/238665/authentication-policy-extensions

 

Best Regards,

Alivo

mnumigration
New Member
May 7, 2019

Thanks for the info Alivo, much appreciated