VPN with LDAP authentification

[peterjhd1218]

Hi, i gotta a question when an user is member of two LDAP groups and both groups has different portal in teh SSL VPN, each one with different range of addres.

My question is, when the user log in, to which group belong?

REgards

[Elthon_Abreu]

The Fortigate will follow the "top-down" rule... So, if the policy that allows "Group A" is above the policy from "Group B", your user will login by the Group A settings.

BR,

[peterjhd1218]

hi Elthon Abreu, thanks for your reply but still it´s not clear to my, let me get this right, i have two diferent SSL portal each one with different address range, according to you answer teh user will be log in with the first policy match that have one of the group that the user belong. 

[Elthon_Abreu · Accepted solution]

Can you send a print from your "ssl.root > internal" rules?