Add AD users to firewall policy

Mes-Lili2 · ‎09-28-2023

Is this possible... the only information I can find states "user groups".

I have this part working by using FSSO for users and groups but cannot find a way of adding a policy for 1 user unless i create a new AD group on my domain and add that group to the policy.

xshkurti · ‎09-28-2023

@Mes-Lili2

I assume this is what you are looking for:
Technical Tip : How to allow traffic from specific... - Fortinet Community

View solution in original post

dbu · ‎09-29-2023

Thank you for your outputs.

In this case if you chose remote LDAP user groups, I think you need to select "Local" as a source for user groups on FSSO agent. Test and let me know.
When you choose Local it means you are referring to locally created user groups on the Fortigate.
When "Collector Agent" groups will come from the agent

Regards!

Regards!
If you have found a solution, please like and accept it to make it easily accessible for others.

Mes-Lili2 · ‎09-30-2023

yes I am selecting local groups. I am then selecting the ldap server that has the AD groups and then searching for myself as a user and group "domain users" to the FSSO agent.

when i do this there are no users retrieved from the collector and whilst running the debug commands from earlier there is no output when i change from collector to local or when user is denied access to internet