User authentification on remote site

[hklb]

Hello,

I prepare an installation of fortigate for a customer with the the head office in switzerland (with all servers), and some remote sites. He want user authentication on remote site... There is no active directory server on remote site (there is less than 10 users on each site).

I would like to configure explicit proxy with ntlm authentication.. There is no server on remote site, so I need to install the FSSO agent on head office, so they will have a bit latency... Is there a risk to make some issue for authentication ? and the usage for the user ?

Did you have some experience in there topology ? what are your advice ?

Thanks in advance (and sorry for my english..)

Lucas

[hklb]

nobody already doing this kind of setup?

[Christopher_McMullan]

I don't anticipate much of a problem, since the challenge is sent from the FortiGate to the client. The credentials passed from branch FGT to the head office will have some latency - that would be about the only leg of the journey where a user may encounter any noticeable delay.