Skip to main content
Claudio
Claudio
New Member
February 9, 2017
Question

Using different Forticlient Profiles based on AD-Groups

  • February 9, 2017
  • 2 replies
  • 3472 views

Hi all,

In my topology remote users connect to Fortigate using Forticlient over IPSec VPN. I would like that Fortigate enforcement utm features to Forticlient using different Forticlient Profiles based on AD-Groups, not on the devices groups. All documentations only show how to do this using device identification group. Questions? This configuration is possible? Is there some documentation that explain in details?

Regards, Claudio Rezende

    2 replies

    Carl_Wallmark
    Carl_Wallmark
    New Member
    February 12, 2017

    Hi,

     

    It´s not possible at this moment, you can only apply per device.

     

    This is what I want to see in the future.

     

    1. Set profile per user and not just device.

    2. To be able to blacklist files on client. (for example block all .js files)

    3. Central quarantine and release of files on client, now you cannot release files centrally.

    4. Set on-net/off-net on more modules than only web filtering.

    5. DLP on FortiClient, as you would in the firewall.

    Pr0f3ssional
    Pr0f3ssional
    New Member
    February 20, 2017

    Hi Claudio,

     

    I too have been looking at this and found no way to do this other than using Device Profiles, would be great if they could roadmap this functionality in.

     

    Dan 

    Terms & ConditionsAccessibility statement