Troubleshooting Tip: Fixing a wrong policy for authentication using RADIUS

[pmeet]

Description	While using RADIUS in addition to another auth server for authentication, FortiGate sometimes uses the wrong policy. The RADIUS server is not mentioned in the group but authentication still occurs through the RADIUS server.
Scope	FortiGate.
Solution	See documentation for more information on RADIUS server authentication: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/634373/authentication-servers#RADIUS_ser...  To fix this issue, follow the steps below: 1) Under User and authentication -> Radius Servers, choose the intended RADIUS server. 2) Under the configuration, look for the ‘Include in every user group' option. If the option is enabled, disable it as it will include the RADIUS server in all groups of the firewall.