LDAP AD Groups sequence validation

3 replies
838 views
Translate All

Hello guys,

So basically my client wants to know if there is a way to force the fortigate to validate an AD group prior to all others, so that the users in that group (that belong to other groups also), may get the permissions set in that first group.

He wants to know if theres is any sequence in wich the fortigate does that, and if so how is it done, by alphbetical order?

As an example /VPN GRUPO ANF/AD_VALIDA , whould this be verified before this one /VPN GRUPO ANF/BD_VALIDA

Thanks

Renante_Era

Staff

The connection is permitted based on the Firewall Policy which is evaluated from top to bottom. Let's say that an end-user login to SSLVPN and authentication were done through LDAP.
FortiGate forwards the credentials to the actual LDAP server which performs the actual validation.

Translate

AlticeAuthor

New Member

Thank you so much for the reply Renante

Translate

sjoshi

Staff

Hi,

You can setup the User group on the firewall policy and it will search from top to bottom.

Further while creating User group and selecting remote server, LDAP filter can be used to select specific CN

Translate

Thanks, Salon

Sign up

Login with SSO

Login to the community

Login with SSO