We user FSSO to authenticate users for web traffic. We don't use explicit proxy because of office365 performance.
When there are multiple users on one server, user traffic from a user will be identified as traffic from another user on the same server. This is not what we want. Did anyone run into the same problem and is there a solution?
We use FSSO with a Collector Agent on one of our DC's and agents on the other DC servers.
Kind Regards,
IPNS
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi,
solution is called Terminal Server Agent. DCAgent collects data from DC, and still does expect one user per workstation, which also mean 1-user = 1-IP. Where terminal server mean N-users per 1-IP .. the TSAgent adds port alocation port range into FSSO chain.
Best regards,
Tomas
Tomas Stribrny - NASDAQ:FTNT - Fortinet Inc. - TAC Staff Engineer
AAA, MFA, VoIP and other Fortinet stuff
Hi,
solution is called Terminal Server Agent. DCAgent collects data from DC, and still does expect one user per workstation, which also mean 1-user = 1-IP. Where terminal server mean N-users per 1-IP .. the TSAgent adds port alocation port range into FSSO chain.
Best regards,
Tomas
Tomas Stribrny - NASDAQ:FTNT - Fortinet Inc. - TAC Staff Engineer
AAA, MFA, VoIP and other Fortinet stuff
Thanks Tomas,
In the documentation I found about the TSagent only Citrix is mentioned. Can this agent also be installed on management servers which receive multiple RDP sessions?
Kind Regards,
Maarten
Kind Regards,
IPNS
If it's server OS and not the workstation (which is supposed to be single user at a time), then it's OK.
Tomas Stribrny - NASDAQ:FTNT - Fortinet Inc. - TAC Staff Engineer
AAA, MFA, VoIP and other Fortinet stuff
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1713 | |
1093 | |
752 | |
447 | |
231 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.