Individualized web filtering for users of Windows Terminal Server ?

[chrbar]

Hello, We've several FortiGate 3700D running FortiOS v5.2.2 build642, managed vith a FortiManager VM v5.2.1 build0662 141212.

We would like to provide individualized web filtering for users of Windows Terminal Server.

We saw the article Web Filtering on Citrix and Windows Terminal Server, and we tried FortiClient on a Windows 2008 TS but the Web Filtering applied to all users was this one from the last user logged!

For information, we've used FortiClientConfigurator (from FortiClientTools_5.2.3.0633) to build a FortiClient including "Web Security" only.

We did it in trial mode, we've not FortiClient licenses yet (Do we need to run it on licensed mode to benefit all features?).

After FortiClient installation on TS, we've registered it to one of our FortiGate.

When there are many users' sessions opened on the TS, FortiClient doesn't provide individualized web filtering to each user!

Do you know how FortiGate can provide individualized web filtering for TS users?

Regards, Chris

[nathan_emerson]

You should be able to use the TS Agent in conjunction with the FSSO collector to do this. You can read all about it in the handbook and the TS Agent download is available alongside the FSSO agent on the downloads page. 

The TS agent assigns each user a range of ports with which the Forti identifies the traffic as belonging to a specific user.