FSAE overview | Using FSAE on your network |
Figure 1: FSAE with DC agent
In Figure 1, the Client User logs on to the Windows domain, information is forwarded to the FSAE Collector agent by the FSAE agent on the domain controller, and if authentication is successful, the information is then sent via the collector agent to the FortiGate unit.
Figure 2: NTLM FSAE implementation
In Figure 2, the Client User logs on to the Windows domain. The FortiGate unit intercepts the request, and requests information about the user login details. The returned values are compared to the stored values on the FortiGate unit that have been received from the domain controller.
| Fortinet Server Authentication Extension Version 1.5 Technical Note |
6 |