FortiGate Firewall: Why use Fortinet Single Sign On (FSSO)? What are the benefits!

[@leelidbetter4286]

Subscribed - great video

[@FortiBytes]

Awesome, thank you!

[@buraksahin7297]

Thank you for the video

[@FortiBytes]

Your very welcome. Let me know if there is anything specific you’d like to see.

[@buraksahin7297]

Hi again@@FortiBytes I would love to see ZTNA videos more, from basic configuration steps on Fortigate and FortiEMS rule creation

[@chriseddisford1834]

@@buraksahin7297 it’s very much on the list. I’m having to take a very short break for this week because I have a couple of nse7 exams I need to take before the changes in October. I do have a ztna video - kzbin.info/www/bejne/oF6QhJZ_Zputfa8 but I plan on doing another because it’s highly requested.

[@OliverJamesRickers]

Subscribed mate 😀

[@FortiBytes]

Thanks Oliver!

[@tori838]

Thank you so much for the video.. Can you please make a videos on FAC as well? How to integrate tacacs, saml,? How cert worke like this kind of videos?

[@FortiBytes]

Thank you for reaching out! Yes sure I need to get myself a new FAC license but then I will add it to the list I recommend the Azure AD FSSO video also FAC is an amazing product.

[@tori838]

@@FortiBytesi appreciate all your contents.. Keep it up..

[@FortiBytes]

Your welcome

[@anonyoutube4619]

Great video. Just so I have everything clear. I watched the whole series. You need FAC to build this Azure AD integration right? I sometimes struggle to explain why people need a FAC. Because the fgt supports SSO right? Is it because with FSSO the authentication part happens automatically and with SSO it needs a trigger? I believe you can also import groups with only SSO right (without FAC)? Thanks again mate. Its been a while since a new video. Anything in the works?

[@FortiBytes]

Hey mate, at the moment for the Azure AD integration it appears you need FortiAuthenticator hopefully that changes in the future. As we all know that for Native AD integration you can just poll directly from the FortiGate. New video has just dropped today I have been on holiday and had to rush another NSE7 for partnership status. Now that both are out of the way there should be a couple of videos a week moving forward. I think the next ones will have something to do with ADVPN including public cloud deployments and FortiManager as the amount of videos around getting the best out of manager including using variables and templates is seriously lacking! Thanks for reaching out let me know if there is anything specific you’d like to see!

[@80211WiGuy]

Do you run into issues where there are too many AD groups for the firewalls to import, like in the hundreds-thousands that dont really apply to your firewall policies?

[@FortiBytes]

Hi Greg you’re able to filter what groups you’re interested in. But it’s a good question if a company has that many groups then I’d suggest that FortiAuthenticator would be the better product for the job.

[@80211WiGuy]

Thank you for responding so quickly @@FortiBytes ! We have a FAC but I've been having a lot of difficulty with trying to filter out all the domain groups we're not interested in.

[@80211WiGuy]

Thanks @@FortiBytes, I'm trying to filter based on an expression. Ex: Any groups that start with "fw-" instead of selecting each new group as they get created. I dont want irrelevant groups like "KB-user" getting downloaded to the fortigates unnecessarily. The pie charts on user dashboards for group memberships look extremely cluttered with all the fw policy irrelevant groups.

[@FortiBytes]

I’m not sure if that’s possible I’ll take a look and come back to you if I find anything!