Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

Allow certain users in our domain to access blocked sites

We have a Fortigate 300D v6.4.8.  We have youtube blocked currently as it uses a lot of our bandwidth.  There are certain individuals in our business that need to access YouTube.  I contacted support and they suggested that we set up FSSO.  I am wondering if there is a different way or is using the FSSO the only alternative?

New Contributor II

The use of FSSO is useful, in particular, when you want to hook the navigation to the AD user, perhaps with dynamic ip. Actually you can just make different policies with different web filter or application control. The discriminant must be the source ip. If you use DHCP then FSSO is for you. Hope this helps.

Marco Spada
Marco Spada


 instead of using FSSO, if you need to create a user based policy, you can go for active polling to AD. And on the basis of that, create user groups which can be called under the policy as source user group.


 If the users are identified on the basis of IP address, you need to add address object group  and add in the policy under configuration.

Jay sharma

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Top Kudoed Authors