FSSO Windows NPS

[Freak-On-Silicon]

Hi;

I have the same problem as:

https://community.fortinet.com/t5/Support-Forum/FSSO-cannot-read-Windows-NPS-user-logins/m-p/63413/t...

I have an Windows AD Environment with two DCs (Server 2016). and and Windows Radius Server NPS (Server 2019).

Fortigate 100F 7.4.3

The Radius is for Wireless Authentication with my Aruba Instant APs. Working fine.

FSSO with the Agents installed works also finde, and i applied and testet some User-based Policies, also working fine.

But how do i get the FSSO Agent Collector to collect the data from my Radius?  

Best regards
Lukas

[AEK]

Hi Lukas

Do you mean RSSO?

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/513092/configuring-radius-ss...

[Freak-On-Silicon]

thanks for your reply.

yes and no.

in the FSSO Collecter Agent at advanced settings, there is "RADIUS Accounting" i thought in this direction.

I had RSSO testet before, didnt work, i will give it another try.

But when i make this with FSSO and RSSO, in my future Policies i have to set alwys both groups, one from FSSO and one from RSSO, am i right?

[AEK]

I see. Never used it before but I think it is explained here: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/482937/agent-based-fsso#RADIUS

Hope it helps.

[Freak-On-Silicon]

yes, but i dont know what to do on the Windows Radius Server.