Technical Tip: How to refresh/clear the wad user/group cache on FortiProxy v7.0.X

[nverma]

Description	This article describes how to refresh/clear the wad user/group cache on FortiProxy v7.0.x.
Scope	FortiProxy v7.0.x.
Solution	As wad maintains its cache for user & group information. In firmware v7.0.x, the old command to refresh/clear wad user/group cache doesn't exist. Clear the existing user cache using the below CLI commands: diagnose wad user clear <ID> <IP> <VDOM> - Once the user is deauthenticated, run the below commands to refresh/clear the wad cache. diagnose test app wad 2500 diagnose test app wad 160: clear cached user info mapping table 161: trigger user cache refreshing 162: trigger group cache refreshing After the cache is cleared and the user is authenticated, the updated user info with the correct group will be reflected. Also, choose to disable the cache globally for LDAP users as a workaround using the below configuration. config web-proxy global set ldap-user-cache disable end