FSSO - Authorization issue

[Janfi]

Hello,

I am currently dealing with an issue related to the FSSO feature, which helps us manage rules on Fortigate. We are experiencing a situation where a user is not authenticated via FSSO when they switch from a wired connection to Wi-Fi. After this change of adapter, the user receives a new IP address and FSSO does not authorize them immediately. We also have a feature enabled that should detect IP address changes, but either it works with significant delay or not at all.

Could someone advise me on how you handle FSSO during a change in the connection method? We would like to continue using rules for selected users.

Best regards and thank you,
Jan

[AEK]

Hi Jan

Most probably related to DNS update. Check this tech tip.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FSSO-with-Dual-network-interface-card-NIC-...

Hope it helps.

[ebilcari]

In addition to this article, you could also consider the use of RSSO, at least for WiFi the setup should already be using RADIUS, some details are discussed here.