FSSO logon and logoff

[Jose_Augusto]

We installed a Fortigate with firmware v5.0, build0147 (GA Patch 1) and we used the FSSO version 3.5.68. Some users are claiming that the internet stopped. When I see the log record exists Fortigate Logon and Logoff user, and the user is not logged off.

[rwpatterson]

Welcome to the forums Using FSSO (or FSAE, it predecessor), you may have to disable monitoring certain logons that check your AV updates and such at login time. Once these log out after doing their job(s), the firewall will think that the work station has signed off. By ignoring their login altogether, the original user will be logged in all the way through. In the older version that I am using, the button was near the bottom on the right, if I can recall... Hope that helps.

[Jose_Augusto]

rwpatterson, thanks for your answer. What button did you say?

[rwpatterson]

" Set Ignore User List"

[Jose_Augusto]

rwpatterson. I really appreciate your help, but I think I could not explain my problem correctly. Is there any way to first record from Logon release access to the internet for a certain period of time ignoring the logoff? I am troubled that my AD is registering Logon and Logoff immediately afterwards. Thanks

[rwpatterson]

You are correct in that I still do not understand what your end goal is. More details please.

[Jose_Augusto]

rwpatterson, I need a manner to register only logon and ignore logoff. Have a manner? In the new version, have button ADVANCED SETTINGS and inside have a option WINDOWS SECURITY EVENT ID POLL.

[rwpatterson]

I have never seen a need for that. Look through the event logs on the domain controller, and find the event ID for logon and place it there. Let us know how it goes. Good luck