FSSO Agent Missing Some Logins

[billp]

I have a 600C with FortiOS 5.0.7. Users are either authenticated via FSSO agent on both our DC' s, or for those with machines not joined to the domain, they can authenticate via Fortinet login page when they start their browser. Some of my domain users have started to complain that the firewall is not authenticating them after their domain login in the morning, and they are then forced to login via webpage to get Internet access. I recently adjusted the DHCP lease time on the network, so I am guessing it' s related to this. I changed the lease time to 16 hours, which is perhaps too short?. I also activated DNS scavenging every 8 days, but I don' t think this would affect the logins. Does anyone have some basic troubleshooting recommendations to help chase down an FSSO issue like this? Thanks.

[Warren_Olson_FTNT]

Bill, You may start with: diag deb app fssod 255 diag deb fsso-polling <several options here depending on what you' re looking for> Have one of the users with issues try to log in and see what you get in debugs.