Solved

Users are not getting internet

Posted on 2015-02-23
3
36 Views
Last Modified: 2016-06-01
I have created two different domain as member domain servers in different networks and with different network firewall. We are facing issues that most of the users are not getting authenticated on Fortigate single sign on agent which is installed on both DCs. and thats why they are not getting internet. As we stop the connectivity or tunnel link between these networks, users can access internet.

I have two networks and i have two domains with server  2003 and another with 2012 R2 server. We are using Fortigte 100D firewall.

-Abhijit
For Infrasoft Technologies.
0
Comment
Question by:syinfra
3 Comments
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 500 total points
Comment Utility
As you have stated this is something very specific with your Fortinet appliance. I am not sure how much assistance you will get here unless someone has experience with this SSO feature as well.

I would suggest checking the Logs on the DC's and also the Fortinet box as well to see what is being blocked.

I would also recommend using something like Wireshark to see the packet captures for a workstation when the SSO is enabled.

Will.
0
 
LVL 4

Expert Comment

by:bominthu
Comment Utility
I have 100D. Could you share the Fortigate config ? I can have a look what is denying access to internet.
0
 

Author Comment

by:syinfra
Comment Utility
I have configured deny rules on both sides of network firewall, not to logon on remote Domain server. Only logon to local domain server. users who are facing issues regarding internet, they are logging on to remote domain server. i.e. user from 172.25.X.X subnet is logged on to 172.21.X.X domain server.
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Join & Write a Comment

Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now