REmote Server Group Names, what syntax

Crac · ‎08-13-2013

I just took delivery of a couple 800c firewalls. (new to fortinet products) I' m setting up my VPN users and using LDAP to do so. When I select Remote Server under my tunnel group and choose " Any" for the group, every AD user can authenticate. My question is: What do I put for my group name? I have an SSL VPN group in AD, do I add that so only those use can authenticate? Or do I not understand the reason for the group name? Does it have to be a local firewall group? The documentation on this seems to be very vague. Any explanation would be appreciated.

rwpatterson · ‎08-13-2013

Welcome to the forums. A couple of questions:

What firmware version on the FGT?

Are you polling the AD directly or using the FSSO software?

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Crac · ‎08-13-2013

Software is version 5 patch 3 Right now I' m polling active directory.

Crac · ‎08-13-2013

This is working now, a syntax error on my part, had two OU flipped around.