Allow certain users in our domain to access blocked sites

[dlits]

We have a Fortigate 300D v6.4.8.  We have youtube blocked currently as it uses a lot of our bandwidth.  There are certain individuals in our business that need to access YouTube.  I contacted support and they suggested that we set up FSSO.  I am wondering if there is a different way or is using the FSSO the only alternative?

[mspada]

The use of FSSO is useful, in particular, when you want to hook the navigation to the AD user, perhaps with dynamic ip. Actually you can just make different policies with different web filter or application control. The discriminant must be the source ip. If you use DHCP then FSSO is for you. Hope this helps.

[sharmaj]

Hi

 instead of using FSSO, if you need to create a user based policy, you can go for active polling to AD. And on the basis of that, create user groups which can be called under the policy as source user group.

 If the users are identified on the basis of IP address, you need to add address object group  and add in the policy under configuration.