Several Questions Best Practice and Possibilities.

[DavidArnold]

Hello,

since im not a professional but want to know what ways are possible i may kindly ask some questions.

Fortigate: 2x FG200E + Analyzer

1. We need to prioritize VOIP Tools like Skype4Business, Teams, Zoom, WebEx and so on. What is the best way to do this?

2. Is it possible with LDAPS to set policys/auth for PCs over DNS? For an AD OU or AD Group? Not user based. (e.g. this is a medical Pc or this is a medical group of pcs, no one should access internet). Only department (all devices, not users) "public relation" can use Facebook and Onedrive. department XYZ can use ssl vpn on those pcs (both in Ad OUs). I need a solution with less maintenance on the firewall.

3. We have redundant internetconnection active/passive. Is it possible to route SSL VPN portal connections to our second firewall (atm passive) to produce load balance even internet connections comes trough FW1?

Sincerely yours,

David