Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Liza1
New Contributor III

Web Filtering and FSSO

If I want to create a policy where an AD user, for example USER1, cannot access a specific website like Facebook. Is there a guide on how to create a firewall policy like this: Source: USER1 Dest All Web Filtering: Block_Facebook? I really need specific instructions on this. I am using FSSO in Fortigate. This user is From AD DOMAIN CONTROLLER

#FortiGate 

4 REPLIES 4
ozkanaltas
Valued Contributor III

Hello @Liza1 ,

 

Actually there is no big difference in FSSO rule configuration. If your FSSO service works properly, you need to add the FSSO user group to the source area in the rule configuration. I couldn't find anything directly about it but I tried to show it on my firewall configuration.Also you can review this document for FSSO. 

 

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/576158/configuring-fsso-fire...

 

 image.png

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW
If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
Liza1
New Contributor III

i write this is it right? but i dont have traffic in this policy. maybe its problem of FSSO connection with AD server?
Screenshot 2024-07-04 161609.png

ozkanaltas
Valued Contributor III

Hello @Liza1 ,

 

Your configuration is correct but I think your user object is wrong. Normally, FSSO user icon should be like this.

 

image.png

 

When I reviewed your screenshot, I saw your user object is a local user. This user type needs active authentication. Because of that, you can't use this user object for FSSO. 

 

To create an FSSO user, you can follow this document. 

 

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/576158/configuring-fsso-fire...

 

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW
If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
Shashwati
Staff
Staff

Configure local user group using FSSO user group and user that local firewall user group on the Firewall policy

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors