Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 5661
  • Last Modified:

how to configure active directory user in fortigate 80c

i have configured fortigate 80c. but i have to take users from domain controller or from windows active directory services. how to do it?
0
DIPRAJ
Asked:
DIPRAJ
1 Solution
 
dpk_walCommented:
FortiGate units use firewall policies to control access to resources based on user groups configured in the policies. Each FortiGate user group is associated with one or more Directory Service user groups. When a user logs in to the Windows or Novell domain, a Fortinet Server Authentication Extension (FSAE) sends the FortiGate unit the users IP address and the names of the Directory Service user groups to which the user belongs.
The FSAE has two components that you must install on your network:
" The domain controller (DC) agent must be installed on every domain controller to monitor user logins and send information about them to the collector agent.
" The collector agent must be installed on at least one domain controller to send the information received from the DC agents to the FortiGate unit.

The FortiGate unit uses this information to maintain a copy of the domain controller user group database. Because the domain controller authenticates users, the FortiGate unit does not perform authentication. It recognizes group members by their IP address.

You must install the Fortinet Server Authentication Extensions (FSAE) on the network and configure the FortiGate unit to retrieve information from the Directory Service server.

To view the list of Directory Service servers, go to User > Directory Service; here you can click Create New and add new domain/group.

Please note this is based on ver 4.0 of software.

Thank you.

0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now