Skip to main content
rcpdkc
rcpdkc
Explorer II
May 30, 2024
Question

Fortigate User Information

  • May 30, 2024
  • 3 replies
  • 2515 views

With which product can I send the information of the user logged in Windows to Fortigate in the easiest way? My goal is to see which ip address belongs to which user in the logs.

3 replies

ozkanaltas
ozkanaltas
Valued Contributor III
May 30, 2024

Hello @rcpdkc ,

 

You can use FSSO Agent or Connector Agent for that. 

 

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/503764/fsso-polling-connector-agent-installation

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-install-the-FSSO-Collector-Agent/ta-p/252983

 

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/802972/include-usernames-in-logs

 

 

    rcpdkc
    rcpdkcAuthor
    Explorer II
    May 31, 2024

    I use FSSO, is there an alternative software similar to NAC?

    ozkanaltas
    ozkanaltas
    Valued Contributor III
    May 31, 2024

    Hello @rcpdkc ,

     

    You can use FortiNAC or FortiAuthenticator but at the end of the day, all products transmit this information to FortiGate via FSSO. Only the way they collect user information is different.

     

    For example, while nac creates user information from authenticated users on the devices it manages, FortiAuthenticator collects user information via FortiClient or RSSO.

      rcpdkc
      rcpdkcAuthor
      Explorer II
      May 31, 2024

      I noticed that Fortinac doesn't pass user information to the firewall. I can't see the user in the firewall logs even though fortinac is there. why could this be ?

       

      @ozkanaltas @ebilcari @AEK 

      ozkanaltas
      ozkanaltas
      Valued Contributor III
      May 31, 2024

      Hello @rcpdkc ,

       

      Did you integrate FortiNAC and FortiGate for FSSO information? 

       

      You can review this document on how you can integrate FortiNAC and FortiGate for FSSO. This document has good and detailed information. 

       

      https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/1c2d2ab0-223d-11ed-9eba-fa163e15d75b/FortiNAC_Security_Fabric_Integration_Guide_v92.pdf

       

        rcpdkc
        rcpdkcAuthor
        Explorer II
        May 31, 2024

        On the Fortinac side, I add the device from the service connector menu, but it does not fall into the fortigate fabric connector menu.

        AEK
        SuperUser
        AEK
        SuperUser
        May 31, 2024

        As per my knowledge you can do it with either FSSO, FortiClient (with EMS) or FortiNAC (with PA).

        If I remember well, I did it on FNAC and FCT EMS with tags, that sends user group info to FGT and you can use them in firewall policies. I didn't double check but I think I'm not wrong.

        AEK
        Terms & ConditionsAccessibility statement