Directly use FSSO address group in firewall policies

Administrators can now directly use FSSO address group in firewall policies.

Case 1:

1. FortiManager has an FSSO Agent with 46 Active Directory groups.

   

2. In the Edit Policy page, Active Directory groups can be directly used under FSSO groups, and there is no need to create an FSSO type user group.

   

Case 2:

1. FortiManager has an LDAP server named ldap1.

   

2. Under FSSO Agent, configure the following:

• User Group source: Local
• LDAP Server : ldap1

Specify the search filter as (objectCategory=group).

In the policy create/edit page, you can view all the user groups from the LDAP server as Active Directory Group for FSSO Groups.

Install the changes to FortiGate.