Web Filtering for AD and non AD users

[Anne]

Hi there, We have got Fortinet 310B v 5.0.3. One of our customers wants to setup Fortigate Web Filtering using Security Profiles. They use AD authentication for some users and thin clients for others. The users who use thin clients do not have any AD credentials and get DHCP assigned ip addresses. The web filtering requirements are pretty basic. I know how to do it for the users with AD accounts but how can we implement for users without AD accounts. If I create an identity based policy and apply web filter to it, I know it would work for AD users which would allow/block them for from accessing web sites What I wanted to know is if I used the same web filter and create a simple policy to allow all to the internet, would it allow the non AD users to browse internet as per the applied web filter or simply block as per the previous rule. Thanks Anne

[rwpatterson]

Non AD users would be shown as ' Guest_FSSO_User' (or something similar). They can be part of an identity based policy as such and can be acted on accordingly.

[Anne]

Thanks Bob. Can you please elaborate this a little bit. Is there any example to refer to?

[rwpatterson]

When you go to create your User Groups, there is a default that cannot be deleted. That group cannot be edited. It' s purpose is to capture anyone else that isn' t authenticated.

[Anne]

Thank you very much. I had no idea about this. Also, is it possible to upload whitelist from web marshal to fortigate directly without having to manually create one.

[rwpatterson]

I' m not familiar with Web Marshal. I can' t answer that one.

[Dipen]

If " Thin Clients" are limited in Number you can use Device Based Policy for them. Create Devices Manually using MAC Addresses and finally a Device Group. Then u create a Device based policy with UTM Filters as required.