FSSO users disconnects frequently

[rezafathi]

Hi

I give my users access to internet based on their FSSO credentials from AD but i think login session disconnects after 15 min and the user should sign out and sign in again in order to access the internet. how can I solve this issue?

[AEK]

Hi Reza

So the issue is probably not in FG, but in FSSO agent, or somewhere between FSSO agent and DC.

• Make sure you configured all FSSO prerequisites (check this link)
  https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explanation-of-auth-timeout-types-for-Fire...
• Make sure your agent version supports your Windows/AD version (check in FOS release notes or just share your FSSO agent version and Windows AD version)
• Check agent logs (C:\Program Files (x86)\Fortinet\FSAE\CollectorAgent & logon_event)

[dbu]

I believe next step is to find more from the logs. Change to "Debug" level on FSSO CA  configuration :

Technical Tip: How to collect FSSO collector agent... - Fortinet Community

[mpeddalla]

Hello Reza ,

Thank you for contacting the Fortinet Forum portal.

Can you please confirm below information:

-What is the current firmware version on firewall?

-What is the firmware version you are using on the FSSO agent?

-Do you use a single server for FSSO agent or have multiple FSSO as primary and secondary DC ?

-Have you tried rebooting DC server were FSSO is installed?

-Can you refer below link for logon timeout were FSSO agent will refresh logon of users to verify how long that was set 
https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/536001/configuring-the-fsso-...

Best regards,

Manasa.