Technical Tip: Controlling web traffic using FSSO User based policies

[dbhavsar]

Description

This article describes how it is possible to control traffic based on FSSO User based policies.

Scope

FortiGate.

Solution

1. The first thing needed is to have the FSSO configured on the FortiGate, visit Technical Tip: Configure FSSO in DC Agent mode for that.
   
   
2. After that create 2 separate web filters as per the requirement, here it has been created to Allow and Block Twitter for user AccessTwitter and BlockTwitter.
       
            
3. Once done apply it to the policies as below, make sure to use the fsso-groups in the policy:
                  
                                      
4. Below, log in with AccessTwitter user and it shows that it is possible to access the Twitter website:
                     
                                         
                                                   
5. Below, log in with the user BlockTwitter, it is impossible to access the web page but possible to ping the destination URL: