FortiSandbox
FortiSandbox provides a solution to protect against advanced threats and ransomware for companies who don’t want to implement and maintain a sandbox environment on their own.
gcortes1
Staff
Staff
Article Id 427299
Description This article explains how to allow the administration access to the FortiSandbox for Specifc LDAP user group.
Scope FortiSandbox.
Solution

Configure an LDAP server:
Go to System Settings -> LDAP Servers -> Create New.

 

Ldap_new.png

 

Expand the 'Advanced Options' section and define the following fields:
Attributes: members.
Filter: (&(objectClass=group)(cn=*)).
Group: 'Required Filter'.

 

Ldap_adv.png

 

Create a user account with the wildcard setting enabled:
Go to System -> Administrators -> Create New -> Admin type Wildcard.

 

Remote_Admin.png

 

Verification:
After the configuration, it is possible to validate the LDAP server's response for the created group.

In this case, the admin group is: 'FSA-Admin,CN=Users,DC=lab,DC=local'.

And the admin user is: 'adminfsa1' or 'adminfsa2'.

 

Ldap_Filter_test.png

 

Go to System -> Administrators -> Select the option: 'Test Login'.

 

Ldap_test_login.png

 

Result:

 

Ldap_test_login_ok.PNG

 

After the configuration, access can be tested for the administrator users.

For the adminfsa1 administrator account:

 

Ldap_test_login_ok.PNG

 

Go to Log & Report -> Events -> System Events -> Filter Message= Administrator.

 

Ldap_test_login_log.png