Users in our network inconsistently get blocked out by the web content filter. We use the Fortinet Single Sign On agent to integrate between the 100F device and our MS Active Directory.
I'm unsure of what my next step is to debug this.
Symptoms
[ul]
Users receive the error below.Within the error message the affected users are missing the User name and Group name references which are normally returned if it is a simple access issue.There doesn't seem to be any logic as to which users are affected, we have had affected users:[ul]with differing group assignmentswith multiple group assignmentswith singular group assignmentsIT admins, managers right down to low level staff.The same users will then work normally in subsequent days. However, we have some users that get this issue for days at a time. [/ul][/ul]
Configuration Items Reviewed
The things I have checked and verified on setup is:
[ul]Web Filter security profileIPv4 Policy in the policy & objectsVerified users are in the correct AD GroupSee the user successfully auth correctly and map to the correct groups in the Firewall User Monitor[/ul]
