About FortiBoris_FTNT

FortiBoris_FTNT · 03-09-2019

Hi, Just for the feedback, this works perfectly with Kerberos and user is seen with "every" AD groups he's belonging in. You can check the user group mapping seen at FGT with those CLIs: # diag debug enable # diag test app wad 2200 // 22xx (xx=proces...

FortiBoris_FTNT · 02-23-2019

Hey there Khizer, thanks for the update.. yes i saw that this is working with FSSO but wanted to achieve the same with Kerberos.. the FSSO polling agent at the FortiGate isn't supposed to scale at more than 200 users i think. hence the need for Kerbe...

FortiBoris_FTNT · 02-22-2019

Hey all, Doing some Kereros + Explicit Proxy testings on v6.0.4. Simple question, how is a user mapped towards multiple AD groups?? For the moment it seems i'm mapped to the 1st group alphabetically and not multiple groups. The idea would be multiple...

FortiBoris_FTNT · 02-21-2019

A KB article explains this: https://kb.fortinet.com/kb/documentLink.do?externalID=FD38065 Kind regards,boris

FortiBoris_FTNT · 03-20-2018

flex10 wrote:Here's the solution provided by FortiNet-Support, successfully tested on my FGT 500D with FortiOS 5.4.4: - set a publicly trusted SSL-certificate under "User & Device" -> "Authentication Settings" which includes the common-name you wish ...

User Statistics

User Activity

Re: Kerberos Authentication Configuration

Re: Kerberos Authentication Configuration

Re: Kerberos Authentication Configuration

Re: Is it possible to assign a zone to the ssl.root interface?

Re: Captive Portal redirection

KCS

Agora

Fortinet Training Institute