Configuring Fsae On Windows Ad - Fortinet Network Adapter FSAE Technical Note

Configuring FSAE on Windows AD

Configuring FSAE on Windows AD
8
9 Select Next and then select Install.
10 When the FSAE InstallShield Wizard completes, ensure that Launch DC Agent
Install Wizard is enabled and select Finish.
The FSAE - Install DC Agent wizard starts.
11 Check the Collector Agent IP address.
If the Collector Agent computer has multiple network interfaces, ensure that the
one that is listed is on your network. The listed Collector Agent listening port is the
default. You should change this only if the port is already used by some other
service.
12 Select Next.
13 Check the list of trusted domains and select Next.
If any of your required domains are not listed, cancel the wizard and set up the
proper trusted relationship with the domain controller. Then run the wizard again
by going to Start > Programs > Fortinet >
Fortinet Server Authentication Extension > Install DC Agent.
14 Optionally, select users that you do not want the DC Agent to monitor logon status
for. These users will not be able to authenticate to FortiGate units using FSAE.
You can also do this later. See
15 Select Next.
16 Optionally, clear the check boxes of domain controllers on which you do not want
to install the FSAE DC Agent.
17 Select Next.
18 Select Yes when the wizard requests that you reboot the computer.
Note: If you reinstall the FSAE software on this computer, your FSAE configuration is
replaced with default settings.
If you want to create a redundant configuration, repeat this procedure on at least
one other domain controller.
Note: When you start to install a second collector agent, when the Install Wizard dialog
appears the second time, cancel it. From the configuration GUI, the monitored domain
controller list should show your domain controllers unselected. Select the ones you wish to
monitor with this collector agent, and click Apply.
Before you can use FSAE, you need to configure it on both Windows AD and on
the FortiGate units. See the next section,
and "Configuring FSAE on FortiGate units" on page
On the FortiGate unit, firewall policies control access to network resources based
on user groups. Each FortiGate user group is associated with one or more
Windows AD user groups.
"Configuring FSAE on Windows AD" on page
"Configuring FSAE on Windows
Fortinet Server Authentication Extension Version 1.5 Technical Note
Using FSAE on your network
8.
AD",
14.
01-30005-0373-20071001