Description This article describes how to clear a single FSSO user login
event from FortiGate. Scope FortiGate with the Fortinet Single Sign-On
Agent. Solution Using the FSSO collector agent it is not possible to
clear a single user logon event, howe...
Description This article describes how to view wad user list and how to
de-authenticate a specific user. Scope Solution 1) Create a User Monitor
widget under Dashboard. 2) Once it is added we can see the authenticated
users as below. 3) De-authentica...
Description This article describes how to access to slave unit, from the
master unit using '# execute ha manage'. The FortiGate units are
configured in HA cluster A-P or A-A cluster, to gain access to slave
from the master unit CLI console. Scope Ver...
Description This article describes how SSL VPN users can bind the IP on
Radius server using Framed IP option.In this case, a Radius server is
configured on FortiAuthenticator. On FortiGate, SSL VPN will be
configured in tunnel mode. Framed IP is also...
Description This article describes how to configure LDAP server and
authentication scheme.LDAP User authentication in Explicit-Proxy mode.-
Configure the LDAP server.- Configure Authentication Scheme/rules and
proxy auth settings.- Configure firewall...
Hello AEK, Please refer the below screen capture. On the same vendor
Specific you need to add multiple groups. Hope this answers your
question. Regards Somu
Hello AEK, No need to create multiple NPS policies, on the same policy
you need to add multiple groups under Vendor Specific option, and bind
these policies on FortiGate. Regards, Somu
Hi AEK, As suggested on below article, need to configure multiple groups
attributes on NPS server and also need to bind these groups on FGT.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-FortiGate-and-Microsoft-NPS-Radius/ta-p...
Hi, Hi, If you are looking to disable and enable the 'nattraversal' on
IPSec phase1 settings, then you need to create action, trigger and
Stitch as below Action: config system automation-actionedit "ipsec"set
action-type cli-scriptset minimum-interva...