Good Evening Experts,
The team I currently working with are experiencing a problem with our web filtering policies through Fortigate 800. Certain websites within our banning polices are being allowed through even though our policies clearly state otherwise.
We have checked all of our polices and nothing appearing to be canceling each other out. We have checked our polices with Active Directory, nothing out of ordinary. Even went so far as to disconnect from it, reset and reconnect and each step of the way still able to get sites that shouldn't be reached (mostly porn, games and personal websites). We even checked the Fortigate web filtering site to make sure that none of the websites had been reassigned a different category- not the problem.
We tried logging off, clearing caches and restarting our test laptops-does not work. We checked our hardware, our domain controllers, the laptop ourselves-nothing. Reinstalling FSAE on our domain controllers also does not working. We have tried refreshing groups and that does not working either.
We have 500 users right now that are also not authenticating and showing up as guest in our Log access reports.
The question I need answered is what else are we missing? Has anyone else had this problem as well and if so how did you fix it?
Thank you for your time and patience,
PXRmoto
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
>the problem was that the domain controllers were not talking to firewall at all.
i afraid that the DCs won't positively talk to your firewall, instead, commonly, you should tell your firewall where the AD is, if the firewall needs to authenticate clients based on AD or LDAP.
just check the relevant firewall settings.
hope it helps,
bbao
Business Accounts
Answer for Membership
by: PXRmotoPosted on 2009-09-12 at 12:42:31ID: 25317623
In addition,
I also just checked Local Ratings in the web filter (My mentor just recommended I look for something like that) and there is no *.* allowances either...
Nothing appears to be out of place in any of our polices, however I'm only intermediate in Fortigate and don't know what else I should be looking for.
Help would greatly be appreciated,
PXRmoto
Data Networks Specialist