FortiManager User Group

[Anne]

Hi,

We are using FMG for managing our firewalls.

can we establish LDAP connectivity between a firewall and AD Server from FMG?

I have established LDAp connectivity between the fws and the AD server and created firewall groups which map to LDAP groups and everything works fine. However, the user groups do not populate on FMG. Using FMG,  I am unable to create any policies with user groups as the user group info does not populate on FMG.

Please help.

Thanks Anne

[localhost]

I guess you are using single-sign on.

Have you tried to Retrieve FSSOs in the Policy & Objects view under "User & Device" -> "Single Sign-On"?

[ergotherego]

You can re-create them manually in FMG.

Or you need to make sure the FGT is referencing those groups in a firewall policy - even if just temporarily. Then you can do an Import Policy and it will bring in all of the associated group and remote server settings.