Skip to main content
claumakurumure
New Member
October 23, 2017
Question

Internet Access via FSSO does not work after 16:00.

  • October 23, 2017
  • 1 reply
  • 3357 views

For some reason users get kicked out after 16:00 GMT +2. Has anybody experienced something simillar FSSO is running in polling mode and the client has 7 DCs.

 

Please assist

    1 reply

    xsilver_FTNT
    Staff
    Staff
    October 24, 2017

    if the users usually log in at around 0800, and get de-authenticated at around 1600

    if they are seen in collector agent as "Not Verified"

    then you had probably hit dead entry interval, which is by default 8 hours

     

    check workstation checks and verifications and that

    - on workstation is Remote Registry Service running

    - collector was installed and runs under Domain Admins group member account

     

    Combiation of above should make users Verified in collector and therefore not falling out of the list due to failed verification and dead entry timer timing out.

    claumakurumure
    New Member
    October 24, 2017

    As per the Fortinet doc I set the deantry interval to 0 but I have found that those users were also on NTLM authentication it looks like if I get this out then I will have won.