Implantation of FortiAuthenticator and FortiClients

[aaf1983]

Hi,

in our office we have domain (called: office) and fortigate.

we have also FSSO agent in our DC, so we can create rules based on AD users.

My question is:

we have users, which not belongs to our domain, but work from our office. (when they not in the office, they using VPN via FortiClient)

we want to authenticate them via the FortiClient in order to create rules in the FW for them.

we start to work with the FortiAuthenticator in order to perform this.

I configured the FortiClient (Enable SSO mobility Agent) and the FortiAuthenticator as described in the guide.

I can see the DC, but i can't see the users which used FortiClient in the Monitor.

How can I see them? how to create rules based on them?

Thanks

[doshbass]

If I understand correctly then you have created a group of users on the FortiAuthenticator that are not domain users.  You need to create an FSSO user group on the FAC with the same name as the user group you created.

This group is then pushed into FSSO in the same way as the AD groups and you can select exactly the same way as you do with AD group