problem of periodic Internet loss

[NikitaG]

FG 100D fw:6.2.15

MS AD domain users
There are two domain controllers and FG agent is installed on them. Ver: 5.0.0312

The user gets Internet access via AD group

Problem:
From time to time, the user loses access to the Internet and is blocked by the default rule.
The logs show that the user field is not filled in.
The user accesses any domain resource and Internet access appears.

There are no new records about the user's logons on the domain controllers.

How can I fix the problem of periodic Internet loss?

[NikitaG]

User work on Windows 10

[hbac · Accepted solution]

Hi @NikitaG,

When the issue is happening, can you check the user status on the FSSO agent? Please refer to the following article: 

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-User-status-Not-Verified-on-the-FSSO...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Optimization-of-FSSO-workstation-check/ta-...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Optimization-of-FSSO-workstation-IP-addres...

Regards, 

[NikitaG]

Hello!
Thanks for the answer.
Why is Duration updated for users?

[hbac]

@NikitaG.,

That should be on the FSSO agent settings. https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explanation-of-FSSO-timers/ta-p/189420

Regards, 

[NikitaG]

Hi!

I configured the article agent. There have been no interruptions for two days. Thank you.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Optimization-of-FSSO-workstation-check/ta-...