Re: IPsec with multiple NPS groups

Somashekara_Hanumant · 10-15-2025

Description This article explains why the FSSO connector is not fetching the user groups, even though the status is connected Scope FortiGate, FSSO Connector. Solution FSSO is configured in Collector mode. When it is configured in Collector mode, the...

Somashekara_Hanumant · 10-09-2025

Description This article describes how to configure field filters on automation-trigger with selected field filters. Scope FortiGate. Solution While configuring the automation stitch, administrators can choose the field filters to trigger the event. ...

Somashekara_Hanumant · 09-11-2025

Description This article describes how to increase the Email/SMS token timeout on FortiAuthenticator. Scope FortiAuthenticator. Solution The administrator can increase the Email/SMS token timeout with the following method: Authentication -> User Acco...

Somashekara_Hanumant · 09-10-2025

Description This article describes how to view the username/ip address on forward traffic logs using FSSO logged on domain users, even though the FSSO user is not authenticated on the respective firewall policy. Scope FortiGate, FSSO, Log. Solution T...

Somashekara_Hanumant · 09-09-2025

Description This article explains how to create a custom admin user with limited permissions on FortiAuthenticator. Scope FortiAuthenticator Solution Follow the steps below to create a custom admin user with limited permissions: Login as a Super Admi...

Somashekara_Hanumant · 08-27-2024

Hello AEK, Request you to please open a web ticket, so that one of our engineer would be able to further assist you on this. Regards, Somu

Somashekara_Hanumant · 08-27-2024

Hello AEK, Please refer the below screen capture. On the same vendor Specific you need to add multiple groups. Hope this answers your question. Regards Somu

Somashekara_Hanumant · 08-27-2024

Hello AEK, No need to create multiple NPS policies, on the same policy you need to add multiple groups under Vendor Specific option, and bind these policies on FortiGate. Regards, Somu

Somashekara_Hanumant · 08-26-2024

Hi AEK, As suggested on below article, need to configure multiple groups attributes on NPS server and also need to bind these groups on FGT. https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-FortiGate-and-Microsoft-NPS-Radius/ta-p...

Somashekara_Hanumant · 08-26-2024

Hi, Hi, If you are looking to disable and enable the 'nattraversal' on IPSec phase1 settings, then you need to create action, trigger and Stitch as below Action: config system automation-actionedit "ipsec"set action-type cli-scriptset minimum-interva...

User Statistics

User Activity

Technical Tip: FSSO connector is not fetching the user group

Technical Tip: Automation trigger with selected field filters

Technical Tip: How to increase Email/SMS token timeout on FortiAuthenticator

Technical Tip: Viewing the username/IP address on traffic logs using FSSO server logged on users

Technical Tip: Steps to create a custom admin user with limited permissions