Block Facebook

[tnhafiz]

Hi guys,

My infra consist of hundreds VDI(citrix) & VM(VMware). And my fortigate not not applied with FSSO. The issue here is, how can I block facebook for some users that using VDI(IP address and hostname change everytime users login)?

Thank you

[pcraponi]

Hi,

You have 2 options:

- Use explict web proxy with Session basead authentication

or

- Search for FSSO for Citrix

http://docs.fortinet.com/uploaded/files/1937/fortigate-authentication-52.pdf

Regards,

Paulo R.

[rey90]

Hi,

i think you will be asked for more things to block. So in your position i would config both, webproxy and FSSO.

works fine for me. Just a few hints:

- Install Fortinet collector agent on DC

- Install Terminal Server Agent on Terminal server

Don´t use the other methods such as reading from the AD or getting pushed updates from DC to a seperate maschine. don´t worked for me very good.

Regards