Allow a program that works through the FortiGate

[CAD]

Hello,

i have program called (white smoke) working fine before setup fortigate firewall in my network. after installed fortigate my program stop working 

i want one tell me how to allow this program working through forigate.

thanks

[ede_pfau]

No, I understood that from your previous post already. The question is: have you changed your program's settings NOT to use the proxy? Usually, when you configure a PC to use a proxy you specify a different port number and the proxy's address. If that is still the case then the FGT cannot handle the traffic.

[CAD]

there is no proxy , there is no any proxy setting for my computer proxy server has been diasbled completely.

thanks

[ede_pfau]

Please post the policy for internet access.

[CAD]

please check rule for internet access in attached file.

thanks

[ede_pfau]

OK, you are using User Identity Based policy! When did you plan to tell us about it...

For internet access you need first to authenticate against the FGT, interactively. Surf to any website and fill in username and password on the intercepting webpage. After that, you can surf freely, and your program will have internet access.

Does an Identity Based policy make sense here? Only you can answer that.

[CAD]

Hello,

I do not have any idea about user authentication, Only created a groups and added user to these groups, because I want to do I prevent some users from accessing to the Internet and allow browsing of some other specific sites,...etc.

thanks

[ede_pfau]

That's how it works. If you add a user group to a policy users have to authenticate against the firewall. Only users in that group providing the correct password are allowed to pass the policy.

So, does that explanation solve your problem with that application not being able to connect to the internet?

[CAD]

What should be done in order to allow the program to access the Internet?

thanks 

[ede_pfau]

Remove the user group from the policy.

[CAD]

that means all users will be able to access internet.

thanks