FFSO AD and Citrix

[Maca3010]

Has anyone coma across this.

We gave set up the AD Agent reporting to a collector then on to the Fortigate for authentication of users to the Internet. This works a treat.

We also have  a Citrix environment the FSSO TS Agent has been installed and is reporting to the same collector. I can see usernames in the list. I can see the usernames from the Citrix Server in the list of FSSO users on the Gateway. But when trying to get to the Internet it is missing out the authentication rule in the firewall.

The rule works for access from PCs . Where the Source address is all and the Source users is a group.

But we are not being filtered by that rule.

Hope this makes sense.

Any ideas.

Thanks

David

[vulcan603]

Did you ever resolve this. I have this same issue.

[Maca3010]

Yes we did.

In the settings for the number of port groups and sessions set them to the maximum number. I think we have them set to 1000 each.

Since then we have had no issues with this.

Hope this helps.

Cheers

David