FSSO missing accesses

[uRhaine]

Hi,

I think i have a simple question, but couldnt find an answer.

I have a setup with fortigate using fsso rules to give users basic web access. Collectors/agents are installed on DCs, one domain. I have that fsso rule with some half-strict web-filtering and app-control and lets say it works fine. Right beneth it I have a copy of that rule, but instead of fsso group i switched to IP for those users/stations. Question is why fsso isnt catching all trafic and drops some of it, which I think it shouldnt. From what i can see its almost all microsoft/skype/msupdate/office/skype traffic, but still on 80/443 ports - so it should be passed on the fsso rule. There are some exceptions like a radiocast website. And I think its not always like that, some users pass that wierd traffic in fsso rule, pretty random behavior.

Thanks for the help, if more information is needed please let me know. OS now 6.0.3, the same was on 5.6.7.