Inconsistent Web Content Filtering Issues

[dennis_fiedler]

Users in our network inconsistently get blocked out by the web content filter. We use the Fortinet Single Sign On agent to integrate between the 100F device and our MS Active Directory.

I'm unsure of what my next step is to debug this.

Symptoms

[ul]

Users receive the error below.

Within the error message the affected users are missing the User name and Group name references which are normally returned if it is a simple access issue.

There doesn't seem to be any logic as to which users are affected, we have had affected users:[ul]

with differing group assignments

with multiple group assignments

with singular group assignments

IT admins, managers right down to low level staff.

The same users will then work normally in subsequent days. However, we have some users that get this issue for days at a time. [/ul][/ul]

Configuration Items Reviewed

The things I have checked and verified on setup is:

[ul]

Web Filter security profile

IPv4 Policy in the policy & objects

Verified users are in the correct AD Group

See the user successfully auth correctly and map to the correct groups in the Firewall User Monitor[/ul]