FSSO - Authorization issue

3 replies
1616 views

Hello,

I am currently dealing with an issue related to the FSSO feature, which helps us manage rules on Fortigate. We are experiencing a situation where a user is not authenticated via FSSO when they switch from a wired connection to Wi-Fi. After this change of adapter, the user receives a new IP address and FSSO does not authorize them immediately. We also have a feature enabled that should detect IP address changes, but either it works with significant delay or not at all.

Could someone advise me on how you handle FSSO during a change in the connection method? We would like to continue using rules for selected users.

Best regards and thank you,
Jan

FortiGate

AEKAnswer

SuperUser

Hi Jan

Most probably related to DNS update. Check this tech tip.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FSSO-with-Dual-network-interface-card-NIC-and-its/ta-p/190654?cmd=displayKC&docType=kc&externalId=FD50329

Hope it helps.

AEK

AEKAnswer

SuperUser

Hi Jan

Most probably related to DNS update. Check this tech tip.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FSSO-with-Dual-network-interface-card-NIC-and-its/ta-p/190654?cmd=displayKC&docType=kc&externalId=FD50329

Hope it helps.

AEK

ebilcari

Staff

In addition to this article, you could also consider the use of RSSO, at least for WiFi the setup should already be using RADIUS, some details are discussed here.

Emirjon

Sign up

Login with SSO

Login to the community

Login with SSO