Skip to main content
doncacciatoconsuting
Explorer II
January 21, 2025
Solved

FSSO vs LDAP groups in Firewall Policy

  • January 21, 2025
  • 1 reply
  • 560 views

Looking into the benefits of FSSO in our environment for the purposes of restricting internet access. What does FSSO give you that a simple LDAP group doesn't within a firewall policy ? Or are they to be used in conjunction ? 

 

Thanks all!

Best answer by AEK

FSSO is for passive authentication, i.e.: once user opens a Windows session, he doesn't need to authentication again in order to be allowed.

Using LDAP group (created statically on FGT) should be associated with an active authentication in order to work, like active portal.

1 reply

AEK
SuperUser
AEKAnswer
SuperUser
January 21, 2025

FSSO is for passive authentication, i.e.: once user opens a Windows session, he doesn't need to authentication again in order to be allowed.

Using LDAP group (created statically on FGT) should be associated with an active authentication in order to work, like active portal.

AEK