Please enable JavaScript.

Coggle requires JavaScript to display documents.

Fortinet SSLVPN (FortiGate Setup (User & Device (User Groups Prod_DLP…

- - - - Remote Server #
      - Group Name Prod_DLP #
    - - Primary Server IP 10.250.2.6
      - Primary Server Secret Secret
  - - - Name Prod_DLP_VPN_IPPool 10.250.223.0/24
      - Type IP/Netmask
      - Subnet/IP Range 10.250.223.0/24
      - Interface any
  - - - Tunnel Mode On
      - Source IP Pools Prod_DLP_VPN_IPPool 10.250.223.0/24
    - - Listen on Interface(s) Lo100
      - Tunnel Mode Client Settings
        
        Portal Prod_DLP_VPN_Portal #
        
        Users/Groups Prod_DLP_VPN_Users #
- - - - seaaddc01.corp.apptio.net
      - vm-seausdc01
    - - Remote User Sync Rules: Cust-DLP-PHASE 2 Test
        
        Remote LDAP: vm-seausdc01 #
        
        Base distinguished name: DC=apptio,DC=lan
        
        LDAP filter: Get DN from AD using template (&(objectClass=user)(objectCategory=person)(memberOf=CN=Cust-DLP-Phase 2 Test,OU=Customer DLP Groups,OU=OUHighSec,DC=apptio,DC=lan)) #
        
        Token-based authentication sync priorities: None
        
        Sync as: Remote LDAP User
        
        Group to associate users with: DLP_Phase_2 Test #
      - User Groups DLP_Phase_2 Test
        
        Type: Remote LDAP
        
        User retrieval: Set a list of imported remote LDAP users
        
        Remote LDAP: vm-seausdc01 #
        
        RADIUS Attributes
        
        Attribute: Fortinet-Group-Name
        
        Value DLP_Phase_2 Test
        
        Vendor Fortinet
      - Realms apptio_lan
        
        User source: vm-seausdc01 (10.250.16.33) #
    - - Client address 10.252.15.6 (FortiGate IP)
      - Secret: RADIUS Secret
      - Profiles DLP_Phase_2 Test
        
        Authentication method: Password-only authentication (exclude users without a password)
        
        Username input format: username@realm
        
        Realms: apptio_lan | vm-seausdc01 (10.250.16.33) #
        
        Groups Filter DLP_Phase_2 Test #
- - - - CN=Cust-DLP-Phase 2 Test-Users,OU=Customer DLP Groups,OU=OUHighSec,DC=apptio,DC=lan