Re: Explicit transparent proxy with Kerberos Auth

Fishbone_FTNT · 12-03-2019

Hi hwle,I am bit surprised servers hang already on netsh commands. Isn't the real problem somewhere else? Maybe the dynamic pool is too small, or maybe the rest for the system is too small. It would be good to investigate. Have a look at number of op...

Fishbone_FTNT · 12-03-2019

Hi mdraevich, this is quite old post, but anyway. It's difficult to guess what you want to achieve without any config snippet at all, but let me give it a try. First I noticed in your post is "priority" in auth-rules. There are no priorities. Either ...

Fishbone_FTNT · 11-22-2019

Hi RDM,it doesn't work for you, because it can't work. Explicit proxy handles authentication *before* ie. `CONNECT www.google.com:443.` command from the browser. This is easy, we will just ask to provide credentials and successful authentication is t...

Fishbone_FTNT · 10-31-2019

Hi Vladimir, you did not explain how users are logged in, but you can use some sort of RADIUS accounting and RSSO on other Fortigates.This is generic and quite flexible and generic solution. You can do something very similar using FSSO on FortiAuthen...

Fishbone_FTNT · 08-21-2019

Hi John, you have two options: 1 - simpler - install on b.com another FSSO CA - if you can. This is much easier to operate and will work well. 2 - complex - you can, as you suggested, to point DCAgent from b.com -> ca.a.com, but in that case you need...

User Statistics

User Activity

Re: Install TS Agent in Citrix Xendesktop Windows 2016 Server

Re: explicit proxy + kerberos + captive portal

Re: Explicit transparent proxy with Kerberos Auth

Re: Way to propagate user identity between firewalls?

Re: FSSO Question for 2 domains

Re: Explicit transparent proxy with Kerberos Auth

Re: One collector agent for multiple Fortigate clu...

Re: Different user showing on Fortinet bar

Re: SSL warning for a valid certificate with capti...

Re: Kicking out clients after a while

Fortinet Training Institute

KCS