" Soft" FortiSSO setup

[Edouard_Villeneuve]

Hello, 90% of our users use a Windows PC, with their AD account. But the remaining 10% are Linux, Mac or tablet users. I would like to: * Get user information automatically for 90% of my users for which FortiSSO would automatically work * Not have this information for the 10% remaining users, as I don' t want to block Linux/Mac/Tablet users, bother them with a login screen or have to assign them static IPs Can this be done? Thanks, - Edouard

[rwdorman]

You could most likely accomplish this with a device group policy. You can create an " All Apple Devices" group as they are identified by OUI. Wouldn' t work for Linux, however.

[Dipen]

For Windows Users you can you FSSO and create a Policy with FSSO User Identity. Then create a second Policy which is Device Identity for Linux Devices, Apple etc provided that Fortigate identifies all devices correctly.