Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
tnhafiz
New Contributor II

Block Facebook

Hi guys,

 

My infra consist of hundreds VDI(citrix) & VM(VMware). And my fortigate not not applied with FSSO. The issue here is, how can I block facebook for some users that using VDI(IP address and hostname change everytime users login)?

 

Thank you

2 REPLIES 2
pcraponi
Contributor II

Hi,

 

You have 2 options:

 

- Use explict web proxy with Session basead authentication

or

- Search for FSSO for Citrix

 

http://docs.fortinet.com/uploaded/files/1937/fortigate-authentication-52.pdf

 

Regards,

Paulo R.

Regards, Paulo Raponi

Regards, Paulo Raponi
rey90
New Contributor

Hi,

 

i think you will be asked for more things to block. So in your position i would config both, webproxy and FSSO.

 

works fine for me. Just a few hints:

- Install Fortinet collector agent on DC

- Install Terminal Server Agent on Terminal server

 

Don´t use the other methods such as reading from the AD or getting pushed updates from DC to a seperate maschine. don´t worked for me very good.

 

Regards

 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors