Internet Access via FSSO does not work after 16:00.

[claumakurumure]

For some reason users get kicked out after 16:00 GMT +2. Has anybody experienced something simillar FSSO is running in polling mode and the client has 7 DCs.

Please assist

[xsilver_FTNT]

if the users usually log in at around 0800, and get de-authenticated at around 1600

if they are seen in collector agent as "Not Verified"

then you had probably hit dead entry interval, which is by default 8 hours

check workstation checks and verifications and that

- on workstation is Remote Registry Service running

- collector was installed and runs under Domain Admins group member account

Combiation of above should make users Verified in collector and therefore not falling out of the list due to failed verification and dead entry timer timing out.

[claumakurumure]

As per the Fortinet doc I set the deantry interval to 0 but I have found that those users were also on NTLM authentication it looks like if I get this out then I will have won.