This is a follow on from a previous guide where I showed how to setup Kerberos and NTLM Proxy Authentication on the FortiGate. This guide aims to build on that and setup firewall rules to push a transparent Web Filter Profile to users that do not configure the proxy on Read more…
This guide assumes you have a functioning Active Directory domain already setup. First lets have a look at the environment: FortiGate – 10.12.92.254DC01 – 10.12.92.252 Domain name: avidpontoon.co.uk Domain Controller Configuration The initial configuration we will complete on the Domain Controller. We need to setup a service account for the Read more…
In the last section, we configured FSSO and setup the Groups on the FortiGate to interface with the FSSO Groups. Now, we will Setup the web proxy and policies for the proxy too. First, we need to enable the Explicit Proxy within the FortiGate. To do this, select ‘Feature Visibility’ Read more…
FSSO is a mechanism that allows a FortiGate to know who is logged into a domain joined computer, and transparently assign the device policies based on that users attributes (like group membership). This is fully transparent to users as the processing is done between the Domain Controller and the FortiGate. Read more…