Skip to main content
Eric_Pouliot
Eric_Pouliot
New Member
December 1, 2015
Question

FSSO and Macintosh?

  • December 1, 2015
  • 1 reply
  • 5298 views

Hi!  I've setup the FSSO with agent on our Fortigate 800C, connected to Active Directory.

All connections from Windows client work, I can see the users in the logs, but not from a Macintosh.

 

Is this a limitation of the product?

 

All the Macintosh are linked to the AD, and every users are authenticated and mapped to the servers.

 

Thank you

Eric.

 

    1 reply

    xsilver_FTNT
    Staff
    xsilver_FTNT
    Staff
    December 2, 2015

    Hi Eric,

    it seems to me that you do polling from FortiGate unit directly. I would suggest to use standalone Collector agent in WinSec or WMI polling + advanced mode, this method has limited capability of support for MacOS based systems. And we saw it working some 2 years ago where some 3rd party domain connector was used on Mac. Important is that connecting Mac does create logon events on DC.

    Kind regards, Tomas

    Eric_Pouliot
    Eric_PouliotAuthor
    New Member
    December 2, 2015

    Hi, Its already set to use the collector agent, the fortigate connect to it with a password.

    The agent was set to "poll logon sessions using Windows NetAPI".

    I changed it to "Check Windows Security Events Logs", and now all my users are guest!

    I tried "Check Windows Security Events Logs using WMI" too.

     

    I'll wait to see if it can see the logon again.

     

    thank you

     

     

     

     

    xsilver wrote:

    Hi Eric,

    it seems to me that you do polling from FortiGate unit directly. I would suggest to use standalone Collector agent in WinSec or WMI polling + advanced mode, this method has limited capability of support for MacOS based systems. And we saw it working some 2 years ago where some 3rd party domain connector was used on Mac. Important is that connecting Mac does create logon events on DC.

    Kind regards, Tomas

    Terms & ConditionsAccessibility statement