Internet Dropout

[Nick_Bligh]

I am experiencing issues where users intermitently lose thier internet connection, it is something to do with authentication. if the user locks thier pc and then unlocks again or logs off and back on again then they gain internet access again.

We are using FSSO agent on our domain controllers in polling mode.

We are currenly running 5.4.8 on fortigate 600C applyances.

Any assistance in touble shooting would be great.

Many Thanks

Nick.

[ede_pfau]

Polling a DC instead of using the event-driven FSSO agent always leaves the possibility that a login event is missed. Besides, polling places more load on the DC. Maybe you could change the FSSO method to get rid of the annoyance.

[Nick_Bligh]

Hi Many thanks for your reply, how do you setup event-driven FSSO agent?

Also I think one of the issues is we are not filtering to particular AD groups so we are syncing with 522 groups, maybe that the issue also.

Nick.

[ede_pfau]

FSSO can be used in 2 modes, polling and per agent on the DC. When a user logs in or logs out the agent notifies the FGT. Some admins try to circumvent the installation of 3rd party software on a server, let alone a DC, and so polling is used instead, with possibly known disadvantages.

If the "event density" is high the chance that FGT and AD become out-of-sync is high when polling.