Technical Tip: Wrong IP in FSSO agentless polling mode

[mle2802]

Description	This article describes a case scenario where a user is bound to the wrong IP while authenticating using FSSO agentless polling mode.
Scope	All firmware and FortiGate.
Solution	This behavior happens when the PC on which the user is logged in is located on a different network than the AD server and NAT is enabled on the policy between those networks. With NAT enabled, it will be translated to the FortiGate interface IP instead. In this case, it is 10.1.1.1. After disabling NAT on the internal policy between the AD server and the user network, the right IP will be shown. If the issue persists, contact Fortinet support.