ZTNA SMB Access

[chrisW4]

Hi,

I have configured ZTNA SMB Access.

What I don't understand is that it takes very long till the system recognizes the ZTNA Proxy entries in the hosts file so connection can be established to mapped network drives.

Is there a way to force the refresh of mapped network drives when offf fabric?

Or any refresh intervall that can be adjusted to a shorter intervall for mapped network drives?

Cheers

Chris

[Anthony_E]

Hello Christoph,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello Christophe,

Could you please have a look into this KB article:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-ZTNA-TCP-Forwarding-Access-Proxy-ZTAP-for-...

Could you please tell me if it helps? If not, we will continue to look for an answer.

Regards,

[chrisW4]

I checked everything without success.

KR

Chris

[maxheadroom]

Chris, have you resolved this?  I can't get ZTNA for SMB to work without remapping the drive continually on a domain-joined client.  When I reboot, the drive remains disconnected.  I may not have waited long enough if you say it works but takes forever!

[chrisW4]

I think that may be the KDC Proxy might solve this issue. But I still need to analyse how the KDC Proxy setup needs to be done in detail.

[duttonkayce]

I've been working with FortiGate's Zero Trust Network Access (ZTNA) to secure our network, and while it's been effective, I've encountered an issue with network drive recognition. It seems that when connecting to network drives through ZTNA, there is a significant delay before the system recognizes the drive mappings, which can be frustrating for our users.

[chrisW4]

OK but why is this delay and how long does it take?

[peisenberg]

ZTNA access proxy with KDC to access shared drives | FortiGate / FortiOS 7.4.1 | Fortinet Document L...

[chrisW4]

Thanks I already read and configured like this.

Only question is 

How do I configure the KDC on domain controller to listen on e.g. "kdcproxy.fortitest.net"