What’s the difference between HTTP/User authentication and Site-Publish? Which solution is recommended?
You can treat Site-Publish as a substitute and better solution to replace HTTP authentication.
Most HTTP/User authentication functions can be implemented by Site-Publish, and FortiWeb recommends using Site-Publish policies instead of HTTP/User authentication policies for better future up-to-date technical support.
How will authentication server pool members be used to authenticate clients if multiple remote servers are contained in one pool for Site-Publish rule?
When you configure a site publishing rule that offloads authentication for a web application to FortiWeb, you use an authentication server pool to specify the method and server that FortiWeb uses to authenticate clients.
The pool can contain one or more servers that use either LDAP or RADIUS to authenticate clients. FortiWeb attempts to authenticate clients using the server at the top of the list of pool members, and then continues to the next member down in the list if the authentication is unsuccessful, and so on. You can use the list options to adjust the position of each item in the list.