Using different Forticlient Profiles based on AD-Groups

[Claudio]

Hi all,

In my topology remote users connect to Fortigate using Forticlient over IPSec VPN. I would like that Fortigate enforcement utm features to Forticlient using different Forticlient Profiles based on AD-Groups, not on the devices groups. All documentations only show how to do this using device identification group. Questions? This configuration is possible? Is there some documentation that explain in details?

Regards, Claudio Rezende

[Carl_Wallmark]

Hi,

It´s not possible at this moment, you can only apply per device.

This is what I want to see in the future.

1. Set profile per user and not just device.

2. To be able to blacklist files on client. (for example block all .js files)

3. Central quarantine and release of files on client, now you cannot release files centrally.

4. Set on-net/off-net on more modules than only web filtering.

5. DLP on FortiClient, as you would in the firewall.

[Pr0f3ssional]

Hi Claudio,

I too have been looking at this and found no way to do this other than using Device Profiles, would be great if they could roadmap this functionality in.

Dan