Question for network protection after connect a computer on the network

Forum|Forum|9 years ago
October 20, 2016
2 replies
3217 views

Hi Everyone,

i want to protect my network because actually, if you come into my office you can connect your personnal laptop and after you get an ip (i work with DHCP) you can go on the web.

My question is : can i link my fortiguard 200D with the AD serveur and after, can i tell at the forti "lock" internet if the computer is not is the domain ....?

Do you understand ?

Regards,

Iescudero

New Member

Hello!!

Yes, you can!

you have to put devices (actually i never try with devices but i think it must be possible) or users in a Active Directory Group and then you create a group in the Fortigate, then create a policy with the group in source field.

Here with radius and wifi: http://cookbook.fortinet.com/wifi-with-wsso-using-windows-nps-and-fgt-groups-54/

Here with the Single-Sign-On: http://cookbook.fortinet.com/single-sign-using-ldap-fsso-agent-advanced-mode-expert/

Hope it Helps!