Skip to main content
MFerrara
New Member
January 19, 2018
Question

User AD disable can connect to VPN

  • January 19, 2018
  • 1 reply
  • 3544 views

Hi, 

I have configured FortiClient on my pc no in domain.

I create a test user and disabled it to the AD.

 

If I try to connect to VPN with disable user the connection is established.

If I remove the disable user from group VPN the connection isn't established

 

I have 4 DC and one Collector Agent installed and replicate correctly.

 

I have 4 groups:

VPN_FASTWEB

Navigation_LDAP_Std

Navigation_LDAP_Full

Navigation_FSSO_Std

Navigation_FSSO_Full

 

Can help me please?

Thanks.

1 reply

MFerrara
MFerraraAuthor
New Member
January 26, 2018

I have a strange malfunction, with the use of SSL-VPN and LDAP authentication. The user is part of the VPN_Fortigate group, which grants him access to the VPN. If I remove the user from the VPN_Fortigate group, the user does not connect. If, on the other hand, only the user in AD is disabled (without removing it from the VPN_Fortigare group), the user is able to log into the SSL-VPN. How does this happen?

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT