Skip to main content
Nick_Bligh
Nick_Bligh
New Member
February 24, 2018
Question

Internet Dropout

  • February 24, 2018
  • 1 reply
  • 4042 views

I am experiencing issues where users intermitently lose thier internet connection, it is something to do with authentication. if the user locks thier pc and then unlocks again or logs off and back on again then they gain internet access again.

 

We are using FSSO agent on our domain controllers in polling mode.

 

We are currenly running 5.4.8 on fortigate 600C applyances.

 

Any assistance in touble shooting would be great.

 

Many Thanks

Nick.

 

    1 reply

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    February 24, 2018

    Polling a DC instead of using the event-driven FSSO agent always leaves the possibility that a login event is missed. Besides, polling places more load on the DC. Maybe you could change the FSSO method to get rid of the annoyance.

    Nick_Bligh
    Nick_BlighAuthor
    New Member
    February 24, 2018

    Hi Many thanks for your reply, how do you setup event-driven FSSO agent?

     

    Also I think one of the issues is we are not filtering to particular AD groups so we are syncing with 522 groups, maybe that the issue also.

     

    Nick.

     

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    February 24, 2018

    FSSO can be used in 2 modes, polling and per agent on the DC. When a user logs in or logs out the agent notifies the FGT. Some admins try to circumvent the installation of 3rd party software on a server, let alone a DC, and so polling is used instead, with possibly known disadvantages.

    If the "event density" is high the chance that FGT and AD become out-of-sync is high when polling.

    Terms & ConditionsAccessibility statement