A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the ‘diagnose debug authd fsso list’ command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the ‘diagnose debug authd fsso list’ command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)
A . The user student must not be listed in the CA’s ignore user list.
B . The user student must belong to one or more of the monitored user groups.
C . The student workstation’s IP subnet must be listed in the CA’s trusted list.
D . At least one of the student’s user groups must be allowed by a FortiGate firewall policy.

View Answer

Answer: B,D