How do we use replacement message and change configuration to customize for these different servers?
How do we use replacement message and change configuration to customize for these different servers?
One option might be to Edit Interface and set "Security mode" to Captive portal and then set there user groups pointing to your external authentication servers. But all the traffic passing this port will be forced to authenticated unless it match explicitly set exemptions.
Another way is to simply set firewall policies to be "identity-based" so they do have users or in your case probably user groups (referencing to 3rd party auth. servers) set inside as part of matching criteria aside to stuff like source/destination address/port and service.
More on https://docs.fortinet.com/document/fortigate/7.0.5/administration-guide/622284/user-authentication
FortiAnswers is the space dedicated to FortiSASE and FortiOS questions and suggestions.
1 Person is following this question.